ds-ci / 137bab04fc9a207825cc5d3ca0337703e60b31d3-happypathtest-137bab0-2 Goto Github PK

DepShield reports that this application's usage of com.fasterxml.jackson.core:jackson-databind:2.9.4 results in the following vulnerability(s):

• (CVSS 9.8) [CVE-2018-7489] Incomplete Blacklist, Deserialization of Untrusted Data

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Component: com.fasterxml.jackson.core:jackson-databind:2.9.4
CVSS Score: 9.8
Vulnerability: [CVE-2018-7489] Incomplete Blacklist, Deserialization of Untrusted Data

Details about the vulnerability are available on the OSS Index page for [CVE-2018-7489] Incomplete Blacklist, Deserialization of Untrusted Data.

_{This is an automated GitHub Issue created by Sonatype DepShield. GitHub Apps, including DepShield, can be managed from the Developer settings of the repository administrators.}