{"action":"Upgrade com.fasterxml.jackson.core:jackson-databind to 2.7.9.5 (2.7.x), 2.8.11.1 (2.8.x) or 2.9.4 (2.9.x) or later.","affected":[{"fixed":"2.8.11.1","introduced":"2.8.0"},{"fixed":"2.9.4","introduced":"2.9.0"},{"fixed":"2.7.9.5","introduced":"0"}],"component":"com.fasterxml.jackson.core:jackson-databind","cve_ids":["CVE-2018-5968"],"ecosystem":"Maven","epss":0.07245,"exploited":false,"fixed_versions":["2.8.11.1","2.9.4","2.7.9.5"],"ghsa_id":"GHSA-w3f4-3q6j-rh82","id":"tcs_01M5N9F9AH07GW22J5NR9RG5PE","modified_at":"2024-03-11T05:18:22.727055Z","published_at":"2020-06-30T20:40:50Z","references":["https://osv.dev/vulnerability/GHSA-w3f4-3q6j-rh82","https://nvd.nist.gov/vuln/detail/CVE-2018-5968","https://github.com/FasterXML/jackson-databind/issues/1899","https://github.com/GulajavaMinistudio/jackson-databind/pull/92/commits/038b471e2efde2e8f96b4e0be958d3e5a1ff1d05","https://github.com/FasterXML/jackson-databind/commit/454be8bb8c913be18298327a84ca45a280b61605","https://github.com/FasterXML/jackson-databind/commit/038b471e2efde2e8f96b4e0be958d3e5a1ff1d0","https://github.com/FasterXML/jackson-databind/commit/03ea0bec6293d4330b5ad19d1d62aca0e3cb6381","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.debian.org/security/2018/dsa-4114","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03902en_us","https://security.netapp.com/advisory/ntap-20180423-0002","https://github.com/FasterXML/jackson-databind","https://access.redhat.com/errata/RHSA-2019:3149","https://access.redhat.com/errata/RHSA-2019:2858","https://access.redhat.com/errata/RHSA-2018:1525","https://access.redhat.com/errata/RHSA-2018:0481","https://access.redhat.com/errata/RHSA-2018:0480","https://access.redhat.com/errata/RHSA-2018:0479","https://access.redhat.com/errata/RHSA-2018:0478"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-w3f4-3q6j-rh82","url":"https://osv.dev/vulnerability/GHSA-w3f4-3q6j-rh82"}],"summary":"Deserialization of Untrusted Data in jackson-databind"}