Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Anchor
anc-known-issues
anc-known-issues
Known issues

Hide block

Resource exhaustion vulnerability in FasterXML jackson-databind

The UNWRAP_SINGLE_VALUE_ARRAYS feature is disabled by default. However, it is possible (though unlikely) that Magnolia could be susceptible to CVE-2022-42003 if this feature is enabled at the project level.

See BUILD-920 for more details.

Tomcat 8 using BCEL may throw class format exception

...