Quick version check: the affected range for all seven is broadly >=2.10.0 =2.19.0 =3.0.0 <3.1.4 — with some CVEs affecting narrower ranges. If you're on a supported release, upgrade to 2.18.8, 2.21.4, or 3.1.4. If you're on an EOL line —...
#AIsecurity #CVEprocess #CVE202654512 #CVE202654513 #deserialization #EOL #GHSA #herodevs #Jackson #jacksondatabind #NES #NVD #RCE
https://foojay.io/today/7-new-vulnerabilities-in-jackson-in-one-day-this-is-what-ai-assisted-security-research-looks-like/
7 Jackson CVEs in One Day: AI-Assisted Security Research

Seven jackson-databind vulnerabilities, one researcher, one day. Two critical RCEs. This is AI-assisted security research in practice.

foojay