CGA-cxxv-5q2j-64j3

Published

Last updated

https://images.chainguard.dev/security/CGA-cxxv-5q2j-64j3

Package

spark-3.4

Latest Update

Under investigation

Aliases

Severity

7.5

High

CVSS V3

Summary

Improper Restriction of XML External Entity Reference in jackson-mapper-asl

Description

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar to CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

References

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CGA-cxxv-5q2j-64j3

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources