[GitHub] [pulsar] lhotari opened a new pull request, #20603: [fix][sec] Suppress false positive CVE-2023-35116 in jackson-databind

["lhotari (via GitHub)" <gi...@apache.org>]

lhotari opened a new pull request, #20603:
URL: https://github.com/apache/pulsar/pull/20603

   ### Motivation
   
   OWASP dependency check is failing because of CVE-2023-35116 in jackson-databind
   
   ### Modifications
   
   Suppress false positive CVE-2023-35116 in jackson-databind
   - see https://github.com/FasterXML/jackson-databind/issues/3972#issuecomment-1596604021
   
   ### Documentation
   
   <!-- DO NOT REMOVE THIS SECTION. CHECK THE PROPER BOX ONLY. -->
   
   - [ ] `doc` <!-- Your PR contains doc changes. -->
   - [ ] `doc-required` <!-- Your PR changes impact docs and you will update later -->
   - [x] `doc-not-needed` <!-- Your PR changes do not impact docs -->
   - [ ] `doc-complete` <!-- Docs have been already added -->


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [pulsar] lhotari merged pull request #20603: [fix][sec] Suppress false positive CVE-2023-35116 in jackson-databind

["lhotari (via GitHub)" <gi...@apache.org>]

lhotari merged PR #20603:
URL: https://github.com/apache/pulsar/pull/20603


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org