/
DirectorySecurity Advisories
Sign In
Security Advisories

CGA-96r4-r5jx-xj3c

Published

Last updated

https://images.chainguard.dev/security/CGA-96r4-r5jx-xj3c
Package

hadoop-fips-3.3.6

Repository

Chainguard

Latest Update
Fix not planned
Aliases
  • CVE-2020-36181
  • GHSA-cvm9-fjm9-3572

Severity

Unknown

Summary

Unsafe Deserialization in jackson-databind

Description

FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Products

Chainguard ContainersChainguard LibrariesChainguard VMs