/
DirectorySecurity Advisories
Sign In
Security Advisories

CGA-2h87-r494-vr4m

Published

Last updated

https://images.chainguard.dev/security/CGA-2h87-r494-vr4m
Package

hadoop-fips-3.3.6

Repository

Chainguard

Latest Update
Fix not planned
Aliases
  • CVE-2020-36183
  • GHSA-9m6f-7xcq-8vf8

Severity

Unknown

Summary

Unsafe Deserialization in jackson-databind

Description

FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Products

Chainguard ContainersChainguard LibrariesChainguard VMs