Vulnerability Bulletins |
DSA-4114 jackson-databind - security update |
|
| Affected software | Debian |
|
It was discovered that jackson-databind, a Java library used to parseJSON and other data formats, did not properly validate user inputbefore attempting deserialization. This allowed an attacker to performcode execution by providing maliciously crafted input. More info: https://www.debian.org/security/2018/dsa-4114 |
|