domains / families / security / jackson-security

jackson-security

separate

Security considerations for Jackson JSON deserialization in Java applications. Covers timing of validation, raw input interception, and common deserialization attack patterns.

When to use

• Jackson JSON deserialization security
• Timing of validation
• Raw input interception
• Common deserialization attack patterns
• Empty key attack vector
• Polymorphic type handling
• Duplicate keys
• Nested injection

Skill page

Source