/
DirectorySecurity Advisories
Sign In
Security Advisories

CGA-723h-9fwq-254c

Published

Last updated

https://images.chainguard.dev/security/CGA-723h-9fwq-254c
Package

hadoop-fips-3.3.6

Repository

Chainguard

Latest Update
Fix not planned
Aliases
  • CVE-2020-9547
  • GHSA-q93h-jc49-78gg

Severity

Unknown

Summary

jackson-databind mishandles the interaction between serialization gadgets and typing

Description

FasterXML jackson-databind 2.x before 2.9.10.4, 2.8.11.6, and 2.7.9.7 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Products

Chainguard ContainersChainguard LibrariesChainguard VMs