| Package | Affected versions | Patched versions |
|---|---|---|
| org.clojure:clojure | < 1.9.0 | 1.9.0 |
| clojure | < 1.9.0 | 1.9.0 |
In Clojure before 1.9.0, classes can be used to construct a serialized object that executes arbitrary code upon deserialization. This is relevant if a server deserializes untrusted objects.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free