PT-2017-4061

Name of the Vulnerable Software and Affected Versions jackson-databind versions prior to 2.6.7.1 jackson-databind versions prior to 2.7.9.1 jackson-databind versions prior to 2.8.9 jackson-databind versions 2.0.0 through 2.9.5 Description A deserialization flaw in the jackson-databind library is...

PT-2017-4058

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.8.10 and earlier FasterXML jackson-databind versions 2.9.x through 2.9.3 Description The issue allows for unauthenticated remote code execution due to an incomplete fix for a deserialization flaw. This can...