Jackson Release 2.9.10

Jump to bottom

Tatu Saloranta edited this page Jul 17, 2019 · 19 revisions

Patch version of 2.9, released on May 16th 2019. Likely the last full 2.9.x release.

Following fixes are included.

Changes, core

Streaming

Databind

#2334: Block one more gadget type (CVE-2019-12384)
#2341: Block one more gadget type (CVE-2019-12814)
#2374: ObjectMapper. getRegisteredModuleIds() throws NPE if no modules registered

Changes, dataformats

XML

#336: WRITE_BIGDECIMAL_AS_PLAIN Not Used When Writing Pretty
#340: Incompatible woodstox-core and stax2-api dependencies (upgrade to woodstox-core 5.3.0)