Releases: flipkart-incubator/zjsonpatch
Releases · flipkart-incubator/zjsonpatch
Releasing 0.4.16
Releasing 0.4.15
updating readme.md with 0.4.15
Releasing 0.4.14
Releasing 0.4.13
Releasing 0.4.12
Releasing 0.4.11
New support of - #120
Releasing 0.4.10
Includes #117
Releasing 0.4.9 version
This release includes - #102
Releasing 0.4.8 version
includes PR #95
Many thanks to @holograph
Releasing 0.4.6 version
Upgrade jackson version to 2.9.7 due to security vulnerabilities.
details --
FasterXML jackson-databind before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath.