java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 288 discussions
[Bug 1916633] CVE-2021-20190 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing
by bugzilla@redhat.com
3 years, 2 months
[Bug 1898907] CVE-2020-26217 XStream: remote code execution due to insecure XML deserialization when relying on blocklists
by bugzilla@redhat.com
3 years, 2 months
[Bug 1898907] CVE-2020-26217 XStream: remote code execution due to insecure XML deserialization when relying on blocklists
by bugzilla@redhat.com
3 years, 2 months
[Bug 1887664] CVE-2020-25649 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)
by bugzilla@redhat.com
3 years, 2 months
[Bug 1887664] CVE-2020-25649 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)
by bugzilla@redhat.com
3 years, 2 months
[Bug 1916633] CVE-2021-20190 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing
by bugzilla@redhat.com
3 years, 2 months
[Bug 1916633] CVE-2021-20190 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to javax.swing
by bugzilla@redhat.com
3 years, 2 months
[Bug 1549276] CVE-2018-7489 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries
by bugzilla@redhat.com
3 years, 2 months
Results per page: