DozerMapper/dozer
GitHub
Releases17
Frequency8 months 1 week
Last Release
Stars2.1K
Dozer is a Java Bean to Java Bean mapper that recursively copies data from one object to another.
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 9.8 CRITICAL | 7.5 HIGH | ||
Dozer improperly uses a reflection-based approach to type conversion, which might allow remote attackers to execute arbitrary code via a crafted serialized object. | |||