Jackson Databind

Jackson Databind is a core module of the Jackson library that provides data-binding functionality for converting Java objects to JSON and vice versa.

Maven Dependency

  <dependency>
    <groupId>com.fasterxml.jackson.core</groupId>
    <artifactId>jackson-databind</artifactId>
    <version>2.15.2</version>
  </dependency>
  

Compatibility of Jackson Databind with Java & Spring Versions

• 1. Unexpected end-of-input: expected close marker for Object
• 2. com.fasterxml.jackson.databind.exc.DatabindException

    import com.fasterxml.jackson.databind.ObjectMapper;

    public class JacksonExample {
        public static void main(String[] args) throws Exception {
            String invalidJson = "{ "name": "John", "age": 30 "; // Missing closing brace
            ObjectMapper mapper = new ObjectMapper();
            mapper.readTree(invalidJson); // Throws exception
        }
    }
    
  

    import com.fasterxml.jackson.databind.ObjectMapper;

    public class JacksonExample {
        static class CircularReference {
            public CircularReference ref;
    
            public CircularReference(CircularReference ref) {
                this.ref = ref;
            }
        }
    
        public static void main(String[] args) throws Exception {
            CircularReference obj = new CircularReference(null);
            obj.ref = obj; // Circular reference
            ObjectMapper mapper = new ObjectMapper();
            mapper.writeValueAsString(obj); // Throws exception
        }
    }
    
  

Vulnerabilities:

Popular Dependencies Using This:

• Spring Boot Starter Web
• Apache Camel
• Hibernate Validator

Manifest Info

Manifest-Version: 1.0
  Built-By: FasterXML
  Specification-Title: jackson-databind
  Specification-Version: 2.15.2
  

References