| Package | Affected versions | Patched versions |
|---|---|---|
| com.fasterxml.util:java-merge-sort | < 1.1.0 | 1.1.0 |
| java-merge-sort | < 1.1.0 | 1.1.0 |
Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdTempFileProvider.java, which uses the permissive File.createTempFile() function, exposing temporary file contents.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free