Get a Demo

Let's Patch It!

Book a short call with one our specialists, we'll walk you through how Endor Patches work, and ask you a few questions about your environment (like your primary programming languages and repository management). We'll also send you an email right after you fill out the form, feel free to reply with any questions you have in advance!

Back to all
Patch

com.fasterxml.jackson.dataformat:jackson-dataformat-xml

About This Package

The project shows strong automation, frequent releases, organizational backing, active pull requests, and broad package dependency, indicating maturity and popularity. However, it lacks recent commits, has many unmerged/rejected pull requests, few maintainers, and no clear source code license, suggesting potential maintenance and licensing risks.

Github Repository

Package Version Scores

Overall
7
/10
Security
8
Activity
7
Popularity
8
Quality
6

Score Factors

The project shows strong automation, frequent releases, organizational backing, active pull requests, and broad package dependency, indicating maturity and popularity. However, it lacks recent commits, has many unmerged/rejected pull requests, few maintainers, and no clear source code license, suggesting potential maintenance and licensing risks.

All Factors
Security
Activity
Popularity
Quality
Quality
Pull Requests from Bots
Pull requests from bot accounts indicate that the project is using automation for development tasks.
Quality
Pull Requests from Bots
Pull requests from bot accounts indicate that the project is using automation for development tasks.

Vulnerabilities Fixed

Cve Name
CVE ID
Severity
jackson-dataformat-xml vulnerable to XML external entity (XXE)
CVE-2016-3720
Critical
jackson-dataformat-xml vulnerable to server side request forgery (SSRF)
CVE-2016-7051
High

Get the Patch Instantly Without Upgrading

Fix Without Upgrading
Detect compatible fix
Apply safe remediation
Fix with a single pull request

Versions of com.fasterxml.jackson.dataformat:jackson-dataformat-xml

Version
CVEs fixed
Lines of Code Changed
2.1.0
CVEs Fixed
C
1
H
1
+27
-0
2.0.6
CVEs Fixed
C
1
H
1
+27
-0
2.1.1
CVEs Fixed
C
1
H
1
+27
-0
2.0.0
CVEs Fixed
C
1
H
1
+27
-0
2.0.4
CVEs Fixed
C
1
H
1
+27
-0
2.0.3
CVEs Fixed
C
1
H
1
+27
-0
2.0.0-RC3
CVEs Fixed
C
1
H
1
+27
-0
2.0.0-RC2
CVEs Fixed
C
1
H
1
+27
-0
2.0.1
CVEs Fixed
C
1
H
1
+27
-0
2.0.5
CVEs Fixed
C
1
H
1
+27
-0
2.0.2
CVEs Fixed
C
1
H
1
+27
-0
2.2.2
CVEs Fixed
C
1
H
1
+27
-0
2.3.1
CVEs Fixed
C
1
H
1
+27
-0
2.3.0-rc1
CVEs Fixed
C
1
H
1
+27
-0
2.2.1
CVEs Fixed
C
1
H
1
+27
-0
2.1.3
CVEs Fixed
C
1
H
1
+27
-0
2.3.0
CVEs Fixed
C
1
H
1
+27
-0
2.1.2
CVEs Fixed
C
1
H
1
+27
-0
2.1.4
CVEs Fixed
C
1
H
1
+27
-0
2.1.5
CVEs Fixed
C
1
H
1
+27
-0
2.3.2
CVEs Fixed
C
1
H
1
+27
-0
2.2.0-rc1
CVEs Fixed
C
1
H
1
+27
-0
2.2.3
CVEs Fixed
C
1
H
1
+27
-0
2.2.0
CVEs Fixed
C
1
H
1
+27
-0
2.2.4
CVEs Fixed
C
1
H
1
+27
-0
2.4.0-rc3
CVEs Fixed
C
1
H
1
+27
-0
2.4.0
CVEs Fixed
C
1
H
1
+27
-0
2.3.4
CVEs Fixed
C
1
H
1
+27
-0
2.4.2
CVEs Fixed
C
1
H
1
+27
-0
2.4.1
CVEs Fixed
C
1
H
1
+27
-0
2.3.3
CVEs Fixed
C
1
H
1
+27
-0
2.4.0-rc2
CVEs Fixed
C
1
H
1
+27
-0
2.3.5
CVEs Fixed
C
1
H
1
+27
-0
2.5.0
CVEs Fixed
C
1
H
1
+27
-0
2.4.6
CVEs Fixed
C
1
H
1
+27
-0
2.7.7
CVEs Fixed
C
0
H
1
+25
-0
2.5.0-rc1
CVEs Fixed
C
1
H
1
+27
-0
2.5.2
CVEs Fixed
C
1
H
1
+27
-0
2.5.3
CVEs Fixed
C
1
H
1
+27
-0
2.8.0.rc1
CVEs Fixed
C
0
H
1
+25
-0
2.4.5
CVEs Fixed
C
1
H
1
+27
-0
2.7.6
CVEs Fixed
C
0
H
1
+25
-0
2.4.4
CVEs Fixed
C
1
H
1
+27
-0
2.5.1
CVEs Fixed
C
1
H
1
+27
-0
2.7.4
CVEs Fixed
C
0
H
1
+25
-0
2.7.5
CVEs Fixed
C
0
H
1
+25
-0
2.8.1
CVEs Fixed
C
0
H
1
+25
-0
2.8.0.rc2
CVEs Fixed
C
0
H
1
+25
-0
2.8.0
CVEs Fixed
C
0
H
1
+25
-0
2.8.2
CVEs Fixed
C
0
H
1
+25
-0
2.8.3
CVEs Fixed
C
0
H
1
+25
-0
2.5.5
CVEs Fixed
C
1
H
1
+27
-0
2.6.2
CVEs Fixed
C
1
H
1
+27
-0
2.6.0
CVEs Fixed
C
1
H
1
+27
-0
2.5.4
CVEs Fixed
C
1
H
1
+27
-0
2.6.1
CVEs Fixed
C
1
H
1
+27
-0
2.6.4-1
CVEs Fixed
C
1
H
1
+27
-0
2.6.5
CVEs Fixed
C
1
H
1
+27
-0
2.6.3
CVEs Fixed
C
1
H
1
+27
-0
2.6.4
CVEs Fixed
C
1
H
1
+27
-0
2.7.0
CVEs Fixed
C
1
H
1
+27
-0
2.6.6
CVEs Fixed
C
1
H
1
+27
-0
2.7.1
CVEs Fixed
C
1
H
1
+27
-0
2.7.2
CVEs Fixed
C
1
H
1
+27
-0
2.7.3
CVEs Fixed
C
1
H
1
+27
-0
2.6.7
CVEs Fixed
C
1
H
1
+27
-0

References

Reference name here

Reference name here

Reference name here

‍

Basic Information

Ecosystem
Release Date
March 7, 2025
LINES OF CODE CHANGED
+27
-0
on latest patch
License
MIT, BSD-3-Clause

Get the Patch Instantly

Secure your app without upgrading.
Fix Without Upgrading