HeroDevs
Visit NES for Jackson Home Page

NES for Jackson Dataformats Binary 2.13.x Release Notes

7 versions

Comprehensive release notes and changelog for NES for Jackson Dataformats Binary 2.13.x, including security patches, bug fixes, and feature updates across all supported versions.

Oct 23, 2026
Latest: 2.13.13
5 Patched Vulnerabilities
VEX Statements

October 2026

2.13.13

Released Oct 23, 2026
CVE-2026-104015
CVE-2026-104016
CVE-2026-104017
CVE-2026-104895
Full Version: 
2.13.5-jackson-dataformats-binary-2.13.13

Security Fixes

  • CVE-2026-104015: read large Avro bytes and fixed values incrementally in JacksonAvroParserImpl and ApacheAvroParserImpl instead of allocating the declared length up front
  • CVE-2026-104016: compare declared string lengths against remaining input in ProtobufParser, so a length near Integer.MAX_VALUE can no longer wrap the bounds check negative and force unbounded TextBuffer growth
  • CVE-2026-104017: stop ProtobufParser._finishBytes pre-allocating a byte[] from an attacker-controlled bytes length prefix, accumulating incrementally when the declared length exceeds buffered input
  • CVE-2026-104895: stop NonBlockingByteArrayParser allocating Smile raw-binary buffers from untrusted declared lengths, and reject overflowing length VInts

Dependency Upgrades

  • Jackson BOM (NES) 2.13.5-jackson-bom-2.13.13

September 2026

2.13.12

Released Sep 24, 2026
Full Version: 
2.13.5-jackson-dataformats-binary-2.13.12

Dependency Upgrades

  • Jackson BOM (NES) 2.13.5-jackson-bom-2.13.12

2.13.11

Released Sep 10, 2026
Full Version: 
2.13.5-jackson-dataformats-binary-2.13.11

Dependency Upgrades

  • Jackson BOM (NES) 2.13.5-jackson-bom-2.13.11

2.13.10

Released Sep 4, 2026
Full Version: 
2.13.5-jackson-dataformats-binary-2.13.10

Dependency Upgrades

  • Jackson BOM (NES) 2.13.5-jackson-bom-2.13.10

July 2026

2.13.9

Released Jul 26, 2026
Full Version: 
2.13.5-jackson-dataformats-binary-2.13.9

Dependency Upgrades

  • Jackson BOM (NES) 2.13.5-jackson-bom-2.13.9

2.13.8

Released Jul 2, 2026
Full Version: 
2.13.5-jackson-dataformats-binary-2.13.8

Dependency Updates

  • Jackson BOM (NES) 2.13.5-jackson-bom-2.13.8
  • Jackson Annotations (NES) 2.13.5-jackson-annotations-2.13.8
  • Jackson Core (NES) 2.13.5-jackson-core-2.13.8
  • Jackson Databind (NES) 2.13.5-jackson-databind-2.13.8

September 2025

2.13.6

Released Sep 25, 2025
Full Version: 
2.13.5-jackson-dataformats-binary-2.13.6

Notes

Dependency Updates

  • Jackson BOM (NES) 2.13.5-jackson-bom-2.13.6

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.