java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 272 discussions
[Bug 1913871] New: CVE-2020-36179 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS
by bugzilla@redhat.com
2 years, 12 months
[Bug 1911502] New: CVE-2020-35728 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool
by bugzilla@redhat.com
2 years, 12 months
[Bug 1909266] New: CVE-2020-35490 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource
by bugzilla@redhat.com
2 years, 12 months
[Bug 1909269] New: CVE-2020-35491 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource
by bugzilla@redhat.com
2 years, 12 months
[Bug 1882310] New: CVE-2020-24750 jackson-databind: mishandles the interaction between serialization gadgets and typing
by bugzilla@redhat.com
2 years, 12 months
[Bug 1737517] New: CVE-2019-14379 jackson-databind: default typing mishandling leading to remote code execution
by bugzilla@redhat.com
2 years, 12 months
[Bug 1683547] New: lucene-7.7.1 is available
by bugzilla@redhat.com
3 years
[Bug 1826805] New: CVE-2020-11619 jackson-databind: Serialization gadgets in org.springframework:spring-aop
by bugzilla@redhat.com
3 years
[Bug 1826798] New: CVE-2020-11620 jackson-databind: Serialization gadgets in commons-jelly:commons-jelly
by bugzilla@redhat.com
3 years
[Bug 1934117] New: CVE-2020-27223 jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS [fedora-all]
by bugzilla@redhat.com
3 years
Results per page: