Skip to content
OpenAdvisories

Package · Debian

objenesis

1 known vulnerabilities.

1 result · Feed

  • Medium 4.5

    Objenesis before 3.6 Type Confusion via Class Name Instantiator Cache

    Objenesis before 3.6 contains a type confusion vulnerability that allows code in one class loader to substitute objects into another by exploiting instantiator caching keyed on class name. When a shared ObjenesisStd instance caches instantiators by clazz.getN…