Jackson Release 2.9.10

Jump to bottom

Tatu Saloranta edited this page Jul 15, 2019 · 19 revisions

Patch version of 2.9, released on May 16th 2019. Likely the last full 2.9.x release.

Following fixes are included.

Changes, core

Streaming

Databind

#2334: Block one more gadget type (CVE-2019-12384)
#2341: Block one more gadget type (CVE-2019-12814)
#2374: ObjectMapper. getRegisteredModuleIds() throws NPE if no modules registered