Jackson Deserialization Vulnerability
On July 29th, 2019 a high severityDeserialization of Untrusted Data vulnerability (CVE-2019-14379,CVE-2019-14439) affecting all versions of com.fasterxml.jackson.core:jackson-databind up to 2.9.9.2 was published.
原文：https://www.a8q9.cn/en/article/jackson-deserialization-vulnerability-03c5cb.html