You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@streams.apache.org by "PJ Fanning (Jira)" <ji...@apache.org> on 2022/08/17 22:04:00 UTC

[jira] [Commented] (STREAMS-682) upgrade jackson again - many more CVEs reported

    [ https://issues.apache.org/jira/browse/STREAMS-682?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17581042#comment-17581042 ] 

PJ Fanning commented on STREAMS-682:
------------------------------------

A new CVE was reported since I logged this. 2.13.3 would be cool if there are no side effects. 2.12.7 also has all the security fixes.

> upgrade jackson again - many more CVEs reported
> -----------------------------------------------
>
>                 Key: STREAMS-682
>                 URL: https://issues.apache.org/jira/browse/STREAMS-682
>             Project: Streams
>          Issue Type: Improvement
>            Reporter: PJ Fanning
>            Priority: Major
>
> Ideally to latest version 2.13.1 but 2.9.10.8 is also CVE free.
> https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind



--
This message was sent by Atlassian Jira
(v8.20.10#820010)