[SECURITY] RCE vulnerability in dependency jackson-databind #952
Assignees
Milestone
Comments
JLLeitschuh
changed the title
JLLeitschuh
added a commit
to JLLeitschuh/ktor
that referenced
this issue
Feb 14, 2019
Security fix in jackson-databind: https://nvd.nist.gov/vuln/search/results?form_type=Basic&results_type=overview&query=+jackson-databind&search_type=all Closes ktorio#952
cy6erGn0m
pushed a commit
that referenced
this issue
Feb 16, 2019
Security fix in jackson-databind: https://nvd.nist.gov/vuln/search/results?form_type=Basic&results_type=overview&query=+jackson-databind&search_type=all Closes #952
cy6erGn0m
pushed a commit
that referenced
this issue
Feb 16, 2019
Security fix in jackson-databind: https://nvd.nist.gov/vuln/search/results?form_type=Basic&results_type=overview&query=+jackson-databind&search_type=all Closes #952 (cherry picked from commit 0005ecb)
schleinzer
pushed a commit
to schleinzer/ktor
that referenced
this issue
Feb 26, 2019
Security fix in jackson-databind: https://nvd.nist.gov/vuln/search/results?form_type=Basic&results_type=overview&query=+jackson-databind&search_type=all Closes ktorio#952
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
In the past month, there have been a significant number of security vulnerabilities and CVE numbers issued against
jackson-databind.This vunerability has a CVSSv3 score of 9.8/10.
https://nvd.nist.gov/vuln/search/results?form_type=Basic&results_type=overview&query=+jackson-databind&search_type=all
Ktor depends upon version
2.9.2ofjackson-module-kotlin:ktor/ktor-features/ktor-jackson/build.gradle
Lines 5 to 7 in 24c7b56
jackson-module-kotlinhas a dependency uponjackson-databind:https://mvnrepository.com/artifact/com.fasterxml.jackson.module/jackson-module-kotlin/2.9.2
Related #773
The text was updated successfully, but these errors were encountered: