CVE-2020-26945: Mybatis

High severity, CVSS 8.1. EPSS: 1.8% chance of exploitation in the next 30 days.

MyBatis before 3.5.6 mishandles deserialization of object streams.

Affected products

• Mybatis Mybatis: before 3.5.6 (fixed in 3.5.6)

Published 2020-10-10. Last modified 2026-06-17.