Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdTempFileProvider.java, which uses the permissive File.createTempFile() function, exposing temporary file contents.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| com.fasterxml.util:java-merge-sort(Maven) | 0 | 1.1.0 | N/A |
CVSS Metrics
