You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@maven.apache.org by "Saikrishna Kosna (Jira)" <ji...@apache.org> on 2022/04/11 06:26:00 UTC

[jira] [Created] (MSHADE-418) Jackson-databind version is being picked as 2.12.6 instead of 2.12.6.1

Saikrishna Kosna created MSHADE-418:
---------------------------------------

             Summary: Jackson-databind version is being picked as 2.12.6  instead of 2.12.6.1
                 Key: MSHADE-418
                 URL: https://issues.apache.org/jira/browse/MSHADE-418
             Project: Maven Shade Plugin
          Issue Type: Bug
    Affects Versions: 3.3.0
            Reporter: Saikrishna Kosna
         Attachments: pom.xml

There was a security issue in jackson-databind, which needs to be upgraded to 2.12.6.1 version. When the version is updated and the Jar file is generated, the security issue still exists as part of the Jar file and the version is being shown as 2.12.6 instead of 2.12.6.1.  Attaching the pom.xml file, please let me know if I am doing something wrong.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)