title: Red Hat Security Advisory: rh-maven35-jackson-databind security update
description: jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution
cpes: cpe:/a:redhat:rhel_software_collections:3::el7