You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tinkerpop.apache.org by "Robert Dale (JIRA)" <ji...@apache.org> on 2019/05/21 12:39:00 UTC

[jira] [Created] (TINKERPOP-2223) Update jackson databind

Robert Dale created TINKERPOP-2223:
--------------------------------------

             Summary: Update jackson databind
                 Key: TINKERPOP-2223
                 URL: https://issues.apache.org/jira/browse/TINKERPOP-2223
             Project: TinkerPop
          Issue Type: Improvement
          Components: io
    Affects Versions: 3.4.1, 3.3.6
            Reporter: Robert Dale


https://app.snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-174736

Upgrade com.fasterxml.jackson.core:jackson-databind to version 2.9.9 or higher.

Security vulnerability is specific to having mysql jars on the classpath. Does not affect us directly.  Low priority, let's put it on the roadmap.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)