| Package | Affected versions | Patched versions |
|---|---|---|
| com.fasterxml.jackson.core:jackson-databind | < 2.9.10.4 | 2.9.10.4 |
| jackson-databind | = 2.10.0< 2.9.10.4 | 2.9.10.4 |
| retail merchandising system | = 15.0 | |
| retail sales audit | = 14.1 |
The com.fasterxml.jackson.core:jackson-databind library before version 2.9.10.4 is vulnerable to an Unsafe Deserialization vulnerability when handling interactions related to the class ignite-jta.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free