CX: Cxced0c06c-935c in Maven-com.fasterxml.jackson.core:jackson-databind and 2.13.0 @ hello-world-java.master

[DhavalPatelPersistent]

Description

A flaw was found in jackson-databind 2.10.x before 2.12.6, 2.13.x before 2.13.1. DoS is possible if using JDK serialization to serialize and deserialize JsonNode values.

MEDIUM Vulnerable Package issue exists @ com.fasterxml.jackson.core:jackson-databind in branch master

Vulnerability ID: Cxced0c06c-935c

Package Name: com.fasterxml.jackson.core:jackson-databind

Severity: MEDIUM

CVSS Score: 5.9

Publish Date: 2021-11-20T11:04:00

Current Package Version: 2.13.0

Remediation Upgrade Recommendation: 2.13.1

Link To SCA

[DhavalPatelPersistent]

Issue still exists.

[DhavalPatelPersistent]

Issue still exists.

[DhavalPatelPersistent]

Issue still exists.