Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Debian jackson-core Important DoS Attack Risk DSA-6336-1 CVE-2025-52999

debian
Calendar Grey June 10, 2026
Debian Logo
A critical flaw in jackson-core may allow attackers to exploit deeply nested JSON, risking service disruption.
A flaw was discovered in jackson-core, a fast and powerful JSON library for Java, which may allow an attacker to cause a denial of service by using deeply nested JSON data
Topics%20covered

Topics Covered

security advisory denial of service debian vulnerability important jackson-core

Summary

Please note that related and complementary jackson-* packages like jackson-
databind or jackson-dataformat-smile had to be upgraded as well in
order to fix build failures caused by the changes to jackson-core.

For the oldstable distribution (bookworm), this problem has been fixed
in version 2.14.1-2~deb12u1.

For the stable distribution (trixie), this problem has been fixed in
version 2.14.1-2~deb13u1.

We recommend that you upgrade your jackson-core packages.

For the detailed security status of jackson-core please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/jackson-core

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
important
Lowest
Low
Medium
High
Critical

Package: jackson-core
CVE ID: CVE-2025-52999

Topics%20covered

Topics Covered

security advisory denial of service debian vulnerability important jackson-core

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here