Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | jackson-databind | 2.9.8-3+deb10u5 |
Vulnerabilities 1
-
High 8.1
jackson-databind vulnerable to unsafe deserialization
A deserialization flaw was discovered in jackson-databind through 2.9.10.4. It could allow an unauthenticated user to perform code execution via ignite-jta or quartz-core: org.apache.ignite.cache.jta.jndi.CacheJndiTmLookup, org.apache.ignite.cache.jta.jndi.Ca…