Skip to content

Jackson Release 2.22.1

Tatu Saloranta edited this page Jul 4, 2026 · 4 revisions

Patch version of 2.22, under development as of June 2026.

Following fixes will be included in this patch release.

Changes, core

N/A

  • #5962: Case-insensitive deserialization may use wrong @JsonIgnoreProperties [CVE-2026-54515]
  • #6060: @JsonView by-passed for @JsonUnwrapped Field/Setter properties

Changes, dataformats

Protobuf

  • #73: Cannot resolve inner types in protoc definitions
  • #134 : oneof fields and some repeated fields incorrectly decoded for proto3 schemas
  • #598: Protobuf parser state handling wrong for implicit close (END_OBJECT)

Clone this wiki locally