22 matches found
CVE-2019-14540
CVE-2019-14540 affects jackson-databind up to version 2.9.10 with serialization gadget risk involving the HikariCP classes (com.zaxxer.hikari.HikariConfig). The authoritative initial doc notes a polymorphic typing issue in jackson-databind related to HikariConfig. Connected-material references (A...
9.8CVSS9.3AI score0.10763EPSS
SaveExploits1References35Affected Software1
20