File tree 2 files changed +4
-2
lines changed
src/main/java/com/fasterxml/jackson/databind/jsontype/impl 2 files changed +4
-2
lines changed Original file line number Diff line number Diff line change @@ -12,7 +12,8 @@ Project: jackson-databind
12
12
(reported by threedr3am & V1ZkRA)
13
13
#2642 : Block one more gadget type (javax.swing, CVE-to-be-allocated)
14
14
(reported by threedr3am)
15
- #2648 : Block one more gadget type (shiro-core, CVE-to-be-allocated)
15
+ #2648 : Block one more gadget type (shiro-core)
16
+ #2653 : Block one more gadget type (shiro-core)
16
17
17
18
2.9.10.3 (23 -Feb-2020 )
18
19
Original file line number Diff line number Diff line change @@ -138,8 +138,9 @@ public class SubTypeValidator
138
138
// [databind#2642]: javax.swing (jdk)
139
139
s .add ("javax.swing.JEditorPane" );
140
140
141
- // [databind#2648]: shire-core
141
+ // [databind#2648], [databind#2653] : shire-core
142
142
s .add ("org.apache.shiro.realm.jndi.JndiRealmFactory" );
143
+ s .add ("org.apache.shiro.jndi.JndiObjectFactory" );
143
144
144
145
DEFAULT_NO_DESER_CLASS_NAMES = Collections .unmodifiableSet (s );
145
146
}
You can’t perform that action at this time.
0 commit comments