Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-ygs8-4gxq-kygq
Aliases:
CVE-2019-12384
GHSA-mph4-vhrx-mv67
|
Deserialization of Untrusted Data in FasterXML jackson-databind
FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible.
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|