/
DirectorySecurity Advisories
Sign In
Security Advisories

CGA-h7vx-vxv2-j387

Published

Last updated

https://images.chainguard.dev/security/CGA-h7vx-vxv2-j387
Package

hadoop-fips-3.3.6

Repository

Chainguard

Latest Update
Fix not planned
Aliases
  • CVE-2018-14718
  • GHSA-645p-88qh-w398

Severity

Unknown

Summary

Arbitrary Code Execution in jackson-databind

Description

FasterXML jackson-databind 2.x before 2.9.7, 2.8.11.3, 2.7.9.5, and 2.6.7.3 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Products

Chainguard ContainersChainguard LibrariesChainguard VMs