Visit NES for Jackson Home Page

Jackson Dataformats Text Release Notes

1 version

Comprehensive release notes and changelog for Jackson Dataformats Text, detailing HeroDevs-provided security patches across all supported versions.

Sep 25, 2025
Latest: 2.13.6
1 Patched Vulnerability
VEX Statements

September 2025

2.13.6

Released on Sep 25, 2025
Full Version:
2.13.5-jackson-dataformats-text-2.13.6

Notes

  • This release originates from the open‑source jackson-dataformats-text project forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds.

Bug Fixes

This release patches the following:

  • CVE-2023-3894:
    • The default maximum nesting level is 1000 to prevent potential denial-of-service attacks.

Dependency Updates

  • Jackson BOM (NES) 2.13.5-jackson-bom-2.13.6

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.