org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource Jackson-databind

The vulnerability of the org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource component in the Jackson-databind library of the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability may allow an attacker to compromise the confidentialit...

OESA-2021-1051 jackson-databind security update

The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration. Security Fixes: FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between...