CVE-2020-26945

ADVISORY - github

Summary

MyBatis before 3.5.6 mishandles deserialization of object streams leading to potential cache poisoning.

EPSS Score⁠: 0.01798 (0.756)

ADVISORY - nist

Deserialization of Untrusted Data

ADVISORY - github

Deserialization of Untrusted Data

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Deserialization of Untrusted Data

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

Deserialization of Untrusted Data

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.