CVE-2025-49128
1 advisory.
Maven/com.fasterxml.jackson.core:jackson-core CVE-2025-49128: medium 4
Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation
Action: Upgrade com.fasterxml.jackson.core:jackson-core to 2.13.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.13.0 | - |
Fixed versions
| 2.13.0 |
Sources
- osv: GHSA-wf8f-6423-gfxg
- https://github.com/FasterXML/jackson-core/security/advisories/GHSA-wf8f-6423-gfxg
- https://nvd.nist.gov/vuln/detail/CVE-2021-22145
- https://nvd.nist.gov/vuln/detail/CVE-2025-49128
- https://github.com/FasterXML/jackson-core/pull/652
- https://github.com/FasterXML/jackson-core/commit/a6c297682737dde13337cb7c3020f299518609a8
- https://github.com/FasterXML/jackson-core
CVE-2025-49128 · published · modified · JSON