Project

General

Profile

Actions

Bug #21927

closed

Jackson-databind used in oauth has CVE

Added by François ARMAND about 2 years ago. Updated over 1 year ago.

Status:
Released
Priority:
N/A
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
Checked
Regression:
No

Description

jackson-databind-2.12.3.jar: CVE-2022-42003(7.5), CVE-2022-42004(7.5)


Related issues 1 (0 open1 closed)

Related to Authentication backends - Bug #21992: New CVE in Jackson-Databind 2.13.4ReleasedAlexis MoussetActions
Actions

Also available in: Atom PDF