Detections
Analytics
SCA: security update for com.fasterxml.jackson.core:jackson-databind (GHSA-mhm7-754m-9p8w)
high Tenable Cloud Security Plugin ID 445071
Description
jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`Solution
Update the com.fasterxml.jackson.core:jackson-databind library and its related packages to version 2.18.9 or later.See Also
Plugin Details
Severity: High
ID: 445071
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 7/22/2026
Updated: 7/22/2026
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 7/21/2026
Vulnerability Publication Date: 7/21/2026
Reference Information
cwe: CWE-863