FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
Name | Vendor | Start Version | End Version |
---|---|---|---|
Jackson-databind | Fasterxml | 2.0.0 (including) | 2.6.7.4 (excluding) |
Jackson-databind | Fasterxml | 2.9.0 (including) | 2.9.10.4 (excluding) |