Skip to main content
VulnerabilityPublished Updated

com.github.javaparser.ast.validator.TreeVisitorValidator.accept · Jackson Databind: Security Exception

Affects jackson-databindSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 18 Oct 2026, 20:11 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzjackson-databindpkg:generic/jackson-databindOther threatsAffected
  • >=407f500a1ec7e7bc31282d8763cf1a47ef4f0338
  • =jackson-databind-2.17.1
  • =jackson-databind-2.17.2
  • =jackson-databind-2.18.0-rc1
  • =jackson-databind-2.18.0
  • =jackson-databind-2.18.1
  • =jackson-databind-2.17.3
  • =jackson-databind-2.18.2
  • =jackson-databind-2.18.3
  • =jackson-databind-3.0.0-rc1
  • =jackson-databind-3.0.0-rc2
  • =jackson-databind-2.19.0-rc2
  • =jackson-databind-3.0.0-rc3
  • =jackson-databind-2.19.0
  • =jackson-databind-2.18.4
  • =jackson-databind-3.0.0-rc4
  • =jackson-databind-3.0.0-rc5
  • =jackson-databind-2.19.1
  • =jackson-databind-2.19.2
  • =jackson-databind-3.0.0-rc6
  • =jackson-databind-2.12.7.2
  • =jackson-databind-2.20.0
  • =jackson-databind-2.20.0-rc1
  • =jackson-databind-3.0.0-rc10
  • =jackson-databind-3.0.0-rc7
  • =jackson-databind-3.0.0-rc8
  • =jackson-databind-3.0.0-rc9
  • =jackson-databind-3.0.0
  • =jackson-databind-3.0.1
  • =jackson-databind-2.18.5
  • =jackson-databind-2.19.3
  • =jackson-databind-2.19.4
  • =jackson-databind-2.20.1
  • =jackson-databind-3.0.2
  • =jackson-databind-3.0.3
  • =jackson-databind-2.21.0
  • =jackson-databind-2.20.2
  • =jackson-databind-3.0.4
  • =jackson-databind-3.1.0-rc1
  • =jackson-databind-2.18.6
  • =jackson-databind-2.21.1
  • =jackson-databind-3.1.0
  • =jackson-databind-2.21.2
  • =jackson-databind-3.1.1
  • =jackson-databind-3.1.2
  • =jackson-databind-2.18.7
  • =jackson-databind-2.21.3
  • =jackson-databind-3.1.3
  • =jackson-databind-2.18.8
  • =jackson-databind-2.21.4
  • =jackson-databind-3.1.4
  • =jackson-databind-2.22.0
  • =jackson-databind-3.2.0
  • =jackson-databind-2.21.5
  • =jackson-databind-2.18.9
  • =jackson-databind-2.22.1
  • =jackson-databind-3.1.5
  • =jackson-databind-3.2.1
  • =jackson-databind-2.21.6
  • =jackson-databind-3.1.6
  • =jackson-databind-3.2.2
  • =jackson-databind-2.18.10
  • =jackson-databind-2.22.2
  • =jackson-databind-2.18.11
  • =jackson-databind-2.21.7
  • =jackson-databind-2.22.3
  • =jackson-databind-3.1.7
  • =jackson-databind-3.2.3
  • =jackson-databind-2.18.12
  • =jackson-databind-2.21.8
  • =jackson-databind-2.22.4
  • =jackson-databind-3.1.8
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67672 ``` Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel ```

References

Community reviews

Loading reviews…