rpm package
opensuse/mybatis&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/mybatis&distro=openSUSE%20Tumbleweed
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-53192 | — | < 3.5.19-1.1 | 3.5.19-1.1 | Aug 18, 2025 | ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the API Ognl.getValue, the OGNL engine parses and evaluates the provided expression | ||
| CVE-2020-26945 | — | < 3.5.6-1.6 | 3.5.6-1.6 | Oct 10, 2020 | MyBatis before 3.5.6 mishandles deserialization of object streams. |
- CVE-2025-53192Aug 18, 2025affected < 3.5.19-1.1fixed 3.5.19-1.1
** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the API Ognl.getValue, the OGNL engine parses and evaluates the provided expression
- CVE-2020-26945Oct 10, 2020affected < 3.5.6-1.6fixed 3.5.6-1.6
MyBatis before 3.5.6 mishandles deserialization of object streams.