Skip to content

[GHSA-5jmj-h7xm-6q6v] jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnoreProperties#8112

Merged
advisory-database[bot] merged 1 commit into
pjfanning/advisory-improvement-8112from
pjfanning-GHSA-5jmj-h7xm-6q6v
Jun 30, 2026
Merged

[GHSA-5jmj-h7xm-6q6v] jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnoreProperties#8112
advisory-database[bot] merged 1 commit into
pjfanning/advisory-improvement-8112from
pjfanning-GHSA-5jmj-h7xm-6q6v

Commits

Commits on Jun 24, 2026