Skip to content

Jackson Release 2.12.7

Jump to bottom
Kim, Joo Hyuk edited this page Oct 12, 2023 · 3 revisions

Patch version of 2.12, released on May 26, 2022. It will be the last full patch release for 2.12 series.

The main reason for releasing one more "full" patch release was to include the one CVE-related fix from micro-patch 2.12.6.1.

Changes, core

Databind

  • #2816: Optimize UntypedObjectDeserializer wrt recursion (CVE-2020-36518)
Clone this wiki locally