Skip to content

Jackson Release 2.12.7

Jump to bottom
Tatu Saloranta edited this page May 26, 2022 · 1 revision

Patch version of 2.12, released on May 26, 2022. It will be the last full patch release for 2.12 series.

The main reason for releasing one more "full" patch release was to include the one CVE-related fix from micro-patch 2.12.6.1.

Changes, core

Databind

  • #2816: Optimize UntypedObjectDeserializer wrt recursion (CVE-2020-36518)

Clone this wiki locally