The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - jackson-core contains core low-level incremental (streaming) parser and generator abstractions used by     Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply     nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large.
    jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document,     defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the     limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse     JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources.
    (CVE-2025-52999)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-52999

high Nessus Plugin ID 248238

Version 1.6

Version 1.5

Version 1.3

Version 1.6 Oct 8, 2025, 9:19 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510080919
Version 1.5 Oct 1, 2025, 4:14 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510010414
Version 1.3 Sep 4, 2025, 5:30 PM Detection (updated detection logic) Plugin Feed: 202509041730