Skip to content

Jackson Release 3.2.1

Jump to bottom
Tatu Saloranta edited this page Jul 10, 2026 · 16 revisions

Patch version of 3.2, released on July 10, 2026.

Following fixes are included in this patch release.

Changes, core

Streaming

None

Databind

  • #6022: Follow-up to #5369: apply content @JsonInclude in StringCollectionSerializer.serializeWithType
  • #6028: Verification of unwrapped fields should mention type containing unwrapped POJO
  • #6031: Getter annotated with @JsonIgnore prevents @JsonAlias from working on @JsonCreator parameter
  • #6043: FAIL_ON_UNKNOWN_PROPERTIES has no effect with JsonFormat.Shape.ARRAY when using creator-based instantiation (such as record)
  • #6055: Honor @JsonView for external-type-id (EXTERNAL_PROPERTY) properties [GHSA-mhm7-754m-9p8w]
  • #6058: Do not allow DNS resolution when deserializing InetAddress
  • #6059: ObjectMapper.valueToTree() with byte[] does not produce BinaryNode
  • #6060: @JsonView by-passed for @JsonUnwrapped Field/Setter properties [CVE-2026-59889]
  • #6065: SerializationFeature.APPLY_JSON_INCLUDE_FOR_CONTAINERS does not fully remove empty collection during serialization
  • #6077: FAIL_ON_UNEXPECTED_VIEW_PROPERTIES not being respected with constructor-backed properties

Changes, data formats

Protobuf

  • #134 : oneof fields and some repeated fields incorrectly decoded for proto3 schemas

TOML

  • #696: TomlMapper writes NaN/Infinity as bare tokens, producing TOML it cannot read back

XML

  • #871: Incorrect deserialization of unwrapped Lists from "null" input (regression due to #627)

Clone this wiki locally