Skip to content

Releases: flipkart-incubator/zjsonpatch

Releasing 0.4.16

10 Dec 12:02
Compare
Choose a tag to compare

Changes include the following -
#174
#172
#171
#165

Releasing 0.4.15

10 Dec 11:34
Compare
Choose a tag to compare
updating readme.md with  0.4.15

Releasing 0.4.14

11 Jan 20:57
Compare
Choose a tag to compare

Releasing 0.4.13

18 Nov 09:13
Compare
Choose a tag to compare

Vulnerabilities fixes
#156 #155 #150 #149 #148 #147 #146

Releasing 0.4.12

18 Feb 13:04
Compare
Choose a tag to compare

Releasing 0.4.11

23 Jun 11:32
Compare
Choose a tag to compare

New support of - #120

Releasing 0.4.10

20 Apr 01:29
Compare
Choose a tag to compare

Releasing 0.4.9 version

20 Jul 08:12
Compare
Choose a tag to compare

This release includes - #102

Releasing 0.4.8 version

16 Mar 06:01
Compare
Choose a tag to compare

includes PR #95
Many thanks to @holograph

Releasing 0.4.6 version

18 Oct 12:06
Compare
Choose a tag to compare

Upgrade jackson version to 2.9.7 due to security vulnerabilities.
details --

FasterXML jackson-databind before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath.