Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-35491

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-r3gr-cxrf-hg25

Serialization gadgets exploit in jackson-databind FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.

gitlab/maven/com.fasterxml.jackson.core/jackson-databind/CVE-2020-35491

Improper Control of Dynamically-Managed Code Resources FasterXML jackson-databind mishandles the interaction between serialization gadgets and typing, related to `org.apache.commons.dbcp2.datasources.SharedPoolDataSource.`