CVE-2026-59888: jackson-databind @JsonIgnore Bypass on Records Leading to Sensitive Data Exposure via Deserialization

github.com 2026-07-15查看中文 →

Security AdvisoryCVE-2026-59888MediumFasterXML

Affected:

com.fasterxml.jackson.core:jackson-databind >= 2.15.0, < 2.18.8
tools.jackson.core:jackson-databind >= 3.0.0, < 3.1.4

Fixed in:

2.18.8
3.1.4

Referenced CVEs: CVE-2026-59888 · 6.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Path Traversal Arbitrary File Write in astralisone/rive-mcp-server-core 2026-08-08 @mindpilot/mcp 0.5.0 Path Traversal Vulnerability and POC 2026-08-08 Path Traversal in memory-graph allowing arbitrary file read/write with PoC 2026-08-08 Command Injection in MauricioMilano/coder-api Project Creation via Git Clone Parameters 2026-08-08 Command Injection (RCE) Vulnerability in llm_memory_mcp auto_capture MCP Action 2026-08-08

Offline Archive

Offline screenshot & PDF are Pro-exclusive