WS-2021-0616 | Mend Vulnerability Database

Vulnerability DatabaseWS-2021-0616

WS-2021-0616

Published:May 14, 2026

Updated:May 14, 2026

FasterXML jackson-databind before 2.12.6 and 2.13.1 there is DoS when using JDK serialization to serialize JsonNode.

Affected Packages

igvtools (CONDA):

Affected version(s) >=2.14.1 <=2.16.2

Fix Suggestion:

Update to version no_fix

igv (CONDA):

Affected version(s) =2.8.9 <2.8.10

Fix Suggestion:

Update to version 2.8.10

gradle (CONDA):

Affected version(s) >=6.4.0 <=7.4.2

Fix Suggestion:

Update to version no_fix

openrefine (CONDA):

Affected version(s) >=3.4 <=3.5.0

Fix Suggestion:

Update to version no_fix

fiji (CONDA):

Affected version(s) =20220414 <20231211

Fix Suggestion:

Update to version 20231211

igv (CONDA):

Affected version(s) >=2.8.11 <=2.16.2

Fix Suggestion:

Update to version no_fix

pyspark (CONDA):

Affected version(s) >=3.2.0 <3.2.3

Fix Suggestion:

Update to version 3.2.3

sirius-csifingerid (CONDA):

Affected version(s) >=4.9.3 <5.8.2

Fix Suggestion:

Update to version 5.8.2

peptide-shaker (CONDA):

Affected version(s) >=2.0.5 <2.2.17

Fix Suggestion:

Update to version 2.2.17

watchdog-wms (CONDA):

Affected version(s) =2.0.8

Fix Suggestion:

Update to version no_fix

jetbrains.rider.frontend4 (NUGET):

Affected version(s) =202.0.20201215.161733 <202.0.20200820.182208

Fix Suggestion:

Update to version 202.0.20200820.182208

flyway.commandline (NUGET):

Affected version(s) >=7.7.3 <9.3.1

Fix Suggestion:

Update to version 9.3.1

mases.knetcli (NUGET):

Affected version(s) >=1.2.0 <1.3.1

Fix Suggestion:

Update to version 1.3.1

jetbrains.rider.frontend2 (NUGET):

Affected version(s) =203.0.20201229.161815 <203.0.20200923.135724-eap01

Fix Suggestion:

Update to version 203.0.20200923.135724-eap01

gridgain (NUGET):

Affected version(s) >=8.8.1 <8.8.14

Fix Suggestion:

Update to version 8.8.14

mases.kafkabridgecli (NUGET):

Affected version(s) >=1.1.7 <=1.1.11

Fix Suggestion:

Update to version no_fix

appdynamics.azure.siteextension.java (NUGET):

Affected version(s) >=20.3.0 <20.6.0.1

Fix Suggestion:

Update to version 20.6.0.1

flyway.commandline.jre (NUGET):

Affected version(s) >=7.15.0 <9.3.1

Fix Suggestion:

Update to version 9.3.1

gridgain (NUGET):

Affected version(s) >=8.7.11 <8.7.43

Fix Suggestion:

Update to version 8.7.43

mases.knet (NUGET):

Affected version(s) >=1.2.0 <1.3.0

Fix Suggestion:

Update to version 1.3.0

mases.kafkabridge (NUGET):

Affected version(s) >=1.1.2 <=1.1.11

Fix Suggestion:

Update to version no_fix

appdynamics.azure.siteextension.javaagent (NUGET):

Affected version(s) >=21.6.1 <22.4.0

Fix Suggestion:

Update to version 22.4.0

jmeter (NUGET):

Affected version(s) =5.4.3 <5.5.0

Fix Suggestion:

Update to version 5.5.0

dynatrace.oneagent.xamarin (NUGET):

Affected version(s) =8.233.0 <8.247.0

Fix Suggestion:

Update to version 8.247.0

jetbrains.rider.frontend2 (NUGET):

Affected version(s) =203.0.20210317.94906 <203.0.20201127.95230-eap09

Fix Suggestion:

Update to version 203.0.20201127.95230-eap09

codelab/flaskphp-identity-mobileid (PHP):

Affected version(s) >=v1.0.29 <v1.0.41

Fix Suggestion:

Update to version v1.0.41

codelab/flaskphp-identity-esteid (PHP):

Affected version(s) >=v2.0.7 <=v3.0.7

Fix Suggestion:

Update to version no_fix

rdpascua/reporter (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

daniel-werner/laravel-schemacrawler (PHP):

Affected version(s) =dev-dependabot/composer/symfony/http-kernel-5.4.20 <dev-analysis-qrWRb9

Fix Suggestion:

Update to version dev-analysis-qrWRb9

dhenyson/jasper-report-php (PHP):

Affected version(s) >=dev-main <=1.0.0

Fix Suggestion:

Update to version no_fix

codelab/flaskphp-identity-mobileid (PHP):

Affected version(s) >=v1.0.20 <v1.0.22

Fix Suggestion:

Update to version v1.0.22

codelab/flaskphp-identity-esteid (PHP):

Affected version(s) =dev-master <v1.0.0

Fix Suggestion:

Update to version v1.0.0

lopezsoft/jasperphp (PHP):

Affected version(s) >=dev-main <=2.9.7

Fix Suggestion:

Update to version no_fix

codelab/flaskphp-identity-mobileid (PHP):

Affected version(s) =dev-master <v1.0.0

Fix Suggestion:

Update to version v1.0.0

daniel-werner/laravel-schemacrawler (PHP):

Affected version(s) =dev-13-migrate-tests-to-github-actions

Fix Suggestion:

Update to version no_fix

rdpascua/jasperstarter (PHP):

Affected version(s) =3.6.2

Fix Suggestion:

Update to version no_fix

codelab/flaskphp-identity-mobileid (PHP):

Affected version(s) =v1.0.18 <v1.0.19

Fix Suggestion:

Update to version v1.0.19

sellerbox/phpjasper (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

rdpascua/jasperstarter (PHP):

Affected version(s) =dev-main <dev-master

Fix Suggestion:

Update to version dev-master

pyspark (PYTHON):

Affected version(s) >=3.2.0 <3.2.3

Fix Suggestion:

Update to version 3.2.3

Related Resources (1)

https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb

Do you need more information?

CVSS v4

Base Score:

8.2

Attack Vector

NETWORK

Attack Complexity

HIGH

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

NONE

Vulnerable System Confidentiality

NONE

Vulnerable System Integrity

NONE

Vulnerable System Availability

HIGH

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH