File tree Expand file tree Collapse file tree 2 files changed +2
-3
lines changed Expand file tree Collapse file tree 2 files changed +2
-3
lines changed Original file line number Diff line number Diff line change 15
15
16
16
<groupId >com.fasterxml.jackson.core</groupId >
17
17
<artifactId >jackson-databind</artifactId >
18
- <version >2.12.8 -SNAPSHOT</version >
18
+ <version >2.12.7.1 -SNAPSHOT</version >
19
19
<name >jackson-databind</name >
20
20
<packaging >bundle</packaging >
21
21
<description >General data-binding functionality for Jackson: works on core streaming API</description >
Original file line number Diff line number Diff line change @@ -4,11 +4,10 @@ Project: jackson-databind
4
4
=== Releases ===
5
5
------------------------------------------------------------------------
6
6
7
- 2.12.7.1 (not yest released )
7
+ 2.12.7.1 (12 -Oct- 2022 )
8
8
9
9
#3582 : Add check in `BeanDeserializer._deserializeFromArray()` to prevent
10
10
use of deeply nested arrays [CVE-2022 -42004 ]
11
-
12
11
#3590 : Add check in primitive value deserializers to avoid deep wrapper array
13
12
nesting wrt `UNWRAP_SINGLE_VALUE_ARRAYS` [CVE-2022 -42003 ]
14
13
You can’t perform that action at this time.
0 commit comments