[Git][security-tracker-team/security-tracker][master] Add CVE-2026-83557/jackson-databind

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
04118894 by Salvatore Bonaccorso at 2026-09-02T08:21:42+02:00
Add CVE-2026-83557/jackson-databind

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -283,7 +283,11 @@ CVE-2026-83605 (xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2
 CVE-2026-83595 (AVideo contains a cross-site request forgery vulnerability in plugin/A ...)
 	NOT-FOR-US: WWBN AVideo
 CVE-2026-83557 (DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator appli ...)
-	TODO: check
+	- jackson-databind <unfixed>
+	NOTE: https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j
+	NOTE: https://github.com/FasterXML/jackson-databind/issues/6156
+	NOTE: https://github.com/FasterXML/jackson-databind/pull/6155
+	NOTE: Fixed by: https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f (jackson-databind-2.18.10)
 CVE-2026-83551 (Cleartext storage of sensitive information in the @step and @remote de ...)
 	NOT-FOR-US: Amazon
 CVE-2026-82927 (Untrusted pointer dereference vulnerability in Samsung Open Source mTo ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/04118894ceafc148899a312a3bb97d53845178cd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/04118894ceafc148899a312a3bb97d53845178cd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260902/bbb28c09/attachment.htm>