Advisory: CVE-2020-15522 Jackson Databind

[mcr-paulanand]

To facilitate future automation, please use the following format

Advisory details

  URL: https://nvd.nist.gov/vuln/detail/CVE-2020-15522
  format: maven
  namespace: org.bouncycastle
  name: bcprov-jdk15on
  versions: (,1.66)

More information
Any additional information that might be useful/interesting

[ken-duck]

Very sorry for the delay. As you may have noticed, a number of issues have fallen through the cracks, and we are in the process of catching up and cleaning things up.

Thank you for your report. We are migrating to a new email-based reporting system in order to better mesh with our internal processes, which will allow us to be more reactive to our users. I have moved your request to the internal tracking system and the research team will look into the issue shortly.

If you notice further issues or would like to follow up on this one, please email ossindex@sonatype.org