Description
MyBatis before 3.5.6 mishandles deserialization of object streams.
Remediation
References
https://github.com/mybatis/mybatis-3/compare/mybatis-3.5.5...mybatis-3.5.6
https://github.com/mybatis/mybatis-3/pull/2079
Related Vulnerabilities
CVE-2020-28439 Vulnerability in npm package corenlp-js-prefab
CVE-2019-10318 Vulnerability in maven package org.jenkins-ci.plugins:azure-ad
CVE-2019-19771 Vulnerability in npm package wallet-address-vaildator
CVE-2020-12648 Vulnerability in maven package org.webjars:tinymce
CVE-2021-23337 Vulnerability in maven package org.fujion.webjars:lodash