DirectorySecurity Advisories
Sign In
Security Advisories

CGA-v9fp-4hr9-647v

Published

Last updated

https://images.chainguard.dev/security/CGA-v9fp-4hr9-647v
Package

hadoop-3.3

Latest Update
Under investigation
Aliases
  • CVE-2020-36189
  • GHSA-vfqx-33qm-g869

Severity

8.1

High

CVSS V3

Summary

Unsafe Deserialization in jackson-databind

Description

FasterXML jackson-databind 2.x before 2.9.10.8 an 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images