Skip to content

@JsonView by-passed for @JsonUnwrapped Field/Setter properties [CVE-2026-59889] #6060

Closed
Closed
@JsonView by-passed for @JsonUnwrapped Field/Setter properties [CVE-2026-59889]#6060
Labels
2.18Issues planned at 2.18 or later2.213.1CVEIssues related to public CVEs (security vuln reports)

Description

@cowtowncoder
cowtowncoder
opened on Jun 26, 2026

Issue similar to #5971, but for "regular", not Creator-based, properties (that is, Field / Setter method).

Metadata

Metadata

Assignees

No one assigned

    Labels

    2.18Issues planned at 2.18 or later2.213.1CVEIssues related to public CVEs (security vuln reports)

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions