Advisories · Technology

java-json-tools jackson-coreutils.

Every CVE that names java-json-tools jackson-coreutils among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-86513 CVE record

CVSS 6.9 Medium

java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources
- java-json-tools jackson-coreutils
- Denial of service
Not analysed yet 8 Sept 2026
CVE-2026-86511 CVE record

CVSS 6.9 Medium

java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption
- java-json-tools jackson-coreutils
- Denial of service
Not analysed yet 8 Sept 2026
CVE-2026-86321 CVE record

CVSS 6.9 Medium

java-json-tools jackson-coreutils URL Validation JsonLoader.java JsonLoader.fromURL server-side request forgery
- java-json-tools jackson-coreutils
- Server-side request forgery (SSRF)
Not analysed yet 7 Sept 2026