Lucene search
+L

1 matches found

Atlassian
Atlassian
added 2023/01/12 9:57 a.m.64 views

Bump jackson-databind dependency to 2.13.4.2

Embedded Crowd library has transitive dependency to vulnerable library code:java com.fasterxml.jackson.core:jackson-databind:jar:2.12.1 - CVE-2020-36518code It is being included through Crowd dependency to com.microsoft.azure:msal4j:jar:1.11.0 The affected versions are before version 5.0.4...

7.5CVSS5AI score0.0486EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder