Download
| Alert*
|
oval:org.secpod.oval:def:504890
The jackson-databind package provides general data-binding functionality for Jackson, which works on top of Jackson core streaming API. Security Fix: * jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration For more details about the security issue, in ... oval:org.secpod.oval:def:2003916 FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration. |
