Top 4 jackson-databind Open-Source Projects

• jackson-databind

  11 3,467 9.7 Java

  General data-binding package for Jackson (2.x): works on streaming API (core) implementation(s)

  

Project mention: The Bogus CVE Problem | news.ycombinator.com | 2023-09-21

Jackson had this problem a few months back, where someone reported a critical CVE against the project and broke builds all around the planet https://github.com/FasterXML/jackson-databind/issues/3972

Basically the programmer (not the attacker) had to write code where an object contained itself

HashMap map=new HashMap<>();

map.put("recursive",map);

After this, Jackson would indeed stack overflow if you asked it to wrap the object to JSON. Then again, half the build-in Java functions (e.g. getting an object hashcode for the map object) also fail for a recursive structure.

The issue remains open 3 months later, Mitre still thinks it's hella serious, and people have yet again learned to just ignore their CI warning about CVEs

• avaje-jsonb

  3 49 9.0 Java

  java json binding library via source code generation

  

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• dynamo-mapper

  3 3 7.2 Java

  Map objects in AWS DynamoDB using Jackson.

  

• unit-testing-backward-compatibility-of-messages-example

  1 2 0.0 Java

  Unit testing backward compatibility of messages example

jackson-databind related posts

• Now it's PostgreSQL's turn to have a bogus CVE

  1 project | news.ycombinator.com | 6 Sep 2023

• Disputed Jackson-databind CVE Causing Disruption

  1 project | news.ycombinator.com | 28 Jun 2023

• "Shaping JSON" in Jackson without creating an object

  1 project | /r/javahelp | 15 Jan 2023

• Deserializing /Serializing immutable fields and the fields within the fields which are immutable and not changeable with Jackson

  1 project | /r/javahelp | 11 Jan 2023

• Mapper for DynamoDB in Java using Jackson for the object serialization

  1 project | /r/java_projects | 18 Dec 2022

• `int('1' * 4301)` will raise ValueError starting with Python 3.10.7

  3 projects | /r/Python | 7 Sep 2022

• Ômicron preocupa por ter respaldo de um modelo Bayesiano para prever o final do ano

  1 project | /r/BrasilSimulator | 7 Sep 2022
• A note from our sponsor - SaaSHub
  www.saashub.com | 23 May 2024

  SaaSHub helps you find the best software and product alternatives Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com