Jackson Release 2.13.3

Jump to bottom

Tatu Saloranta edited this page Apr 5, 2022 · 11 revisions

Patch version of 2.13, being under development as of March 6, 2022. (2.13.2 was released on 06-March-2022).

Following fixes will be included in this patch release.

Changes, core

Streaming

#744: Limit size of exception message in BigDecimalParser

None yet

Databind

#2816: Optimize UntypedObjectDeserializer wrt recursion [CVE-2020-36518]
#3412: Version 2.13.2 uses Method.getParameterCount() which is not supported on Android before API 26
#3446: java.lang.StringBuffer cannot be deserialized