Lucene search

K
osvGoogleOSV:GHSA-F9XH-2QGP-CQ57
HistoryDec 09, 2021 - 7:16 p.m.

Unsafe Deserialization in jackson-databind

2021-12-0919:16:42
Google
osv.dev
17

0.003 Low

EPSS

Percentile

66.1%

FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.