Download
| Alert*
oval:org.secpod.oval:def:505103
The jackson-databind package provides general data-binding functionality for Jackson, which works on top of Jackson core streaming API. Security Fix: * jackson-databind: Serialization gadgets in org.springframework:spring-aop * jackson-databind: Serialization gadgets in commons-jelly:commons-jelly ... oval:org.secpod.oval:def:2003911 FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean . |