Top 4 Java jackson-databind Projects

jackson-databind

11 3,454 9.7 Java

General data-binding package for Jackson (2.x): works on streaming API (core) implementation(s)

Project mention: The Bogus CVE Problem | news.ycombinator.com | 2023-09-21

Jackson had this problem a few months back, where someone reported a critical CVE against the project and broke builds all around the planet https://github.com/FasterXML/jackson-databind/issues/3972
Basically the programmer (not the attacker) had to write code where an object contained itself
HashMap map=new HashMap<>();
map.put("recursive",map);
After this, Jackson would indeed stack overflow if you asked it to wrap the object to JSON. Then again, half the build-in Java functions (e.g. getting an object hashcode for the map object) also fail for a recursive structure.
The issue remains open 3 months later, Mitre still thinks it's hella serious, and people have yet again learned to just ignore their CI warning about CVEs

avaje-jsonb

3 47 9.1 Java

java json binding library via source code generation
WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
dynamo-mapper

3 3 7.4 Java

Map objects in AWS DynamoDB using Jackson.
unit-testing-backward-compatibility-of-messages-example

1 2 0.0 Java

Unit testing backward compatibility of messages example

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).