Published threat advisories for January 2, 2020

The Spring Framework contains a Java deserialization vulnerability that may allow remote code execution if it processes untrusted data. The actual risk depends on how the framework is implemented, and whether authentication is required.

NVD modified: NVD date unavailable