From 298113278a113d19b8081d483cffd8eeeca4f144 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 27 Nov 2023 23:04:47 +0000 Subject: [PATCH] Publish GHSA-gwp4-hfv6-p7hw --- .../2019/08/GHSA-gwp4-hfv6-p7hw/GHSA-gwp4-hfv6-p7hw.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/advisories/github-reviewed/2019/08/GHSA-gwp4-hfv6-p7hw/GHSA-gwp4-hfv6-p7hw.json b/advisories/github-reviewed/2019/08/GHSA-gwp4-hfv6-p7hw/GHSA-gwp4-hfv6-p7hw.json index ea6961ece82..131dc51a00c 100644 --- a/advisories/github-reviewed/2019/08/GHSA-gwp4-hfv6-p7hw/GHSA-gwp4-hfv6-p7hw.json +++ b/advisories/github-reviewed/2019/08/GHSA-gwp4-hfv6-p7hw/GHSA-gwp4-hfv6-p7hw.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-gwp4-hfv6-p7hw", - "modified": "2023-09-13T17:26:54Z", + "modified": "2023-11-27T23:03:26Z", "published": "2019-08-01T19:18:06Z", "aliases": [ "CVE-2019-14439" ], "summary": "Deserialization of untrusted data in FasterXML jackson-databind", - "details": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2, 2.8.11.14, 2.7.9.6, and 2.6.7.3. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.", + "details": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2, 2.8.11.4, 2.7.9.6, and 2.6.7.3. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.", "severity": [ { "type": "CVSS_V3", @@ -47,7 +47,7 @@ "introduced": "2.8.0" }, { - "fixed": "2.8.11.14" + "fixed": "2.8.11.4" } ] }