Skip to content

1.6.0.3 Json-Jackson vulnerability fix

Compare
Choose a tag to compare
@michaelgantman michaelgantman released this 06 Apr 17:14
· 26 commits to master since this release

jackson-databind is a data-binding package for the Jackson Data Processor. jackson-databind allows a Java stack overflow exception and denial of service via a large depth of nested objects. So the upgrade to the latest version fixes the issue