CVE-2026-86321

Name of the Vulnerable Software and Affected Versions java-json-tools jackson-coreutils version 2.0

Description An issue exists in the URL Validation component within the JsonLoader.fromURL() function. This flaw allows a remote attacker to perform server-side request forgery (SSRF), a technique where the attacker induces the server to make requests to an unintended location.

Recommendations As a temporary workaround, consider restricting the use of the JsonLoader.fromURL() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.