| Package | Affected versions | Patched versions |
|---|---|---|
| corda | < 4.1 | 4.1 |
In Corda before 4.1, the meaning of serialized data can be modified via an attacker-controlled CustomSerializer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free