~ / search / GHSA-qq48-m4jx-xqh8

GHSA-qq48-m4jx-xqh8

"Deserialization errors in MyBatis"

Source: GitHub Advisory Database (reviewed) High CVE-2020-26945

Packages

EcosystemPackageAffectedFixed in
Maven org.mybatis:mybatis < 3.5.6 3.5.6

Details

As written in the advisory (Markdown source, shown as plain text).

MyBatis before 3.5.6 mishandles deserialization of object streams leading to potential cache poisoning.

References

External links from the advisory. They lead to third-party sites.