Jackson Release 2.9.10

Jump to bottom

Tatu Saloranta edited this page Jul 17, 2019 · 19 revisions

Patch version of 2.9, released on May 16th 2019. Likely the last full 2.9.x release.

Following fixes are included.

Changes, core

Streaming

Databind

#2334: Block one more gadget type (CVE-2019-12384)
#2341: Block one more gadget type (CVE-2019-12814)
#2374: ObjectMapper. getRegisteredModuleIds() throws NPE if no modules registered

Changes, dataformats

XML

#340: Woodstox vs stax2 version issue for 2.9.9