Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-ceub-d4s9-dkcd
Aliases:
CVE-2017-15095
GHSA-h592-38cm-4ggp
|
Deserialization of Untrusted Data
A deserialization flaw was discovered in the jackson-databind which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the `readValue` method of the `ObjectMapper`.
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|