You are viewing a plain text version of this content. The canonical link for it is here.

Posted to hdfs-issues@hadoop.apache.org by "Alexander Veit (Jira)" <ji...@apache.org> on 2025/09/07 13:48:00 UTC

[jira] [Created] (HDFS-17825) hadoop-client-runtime vulnerabilities from jackson-core 2.12.7

Alexander Veit created HDFS-17825:
-------------------------------------

             Summary: hadoop-client-runtime vulnerabilities from jackson-core 2.12.7
                 Key: HDFS-17825
                 URL: https://issues.apache.org/jira/browse/HDFS-17825
             Project: Hadoop HDFS
          Issue Type: Bug
    Affects Versions: 3.4.2
            Reporter: Alexander Veit


{{com.fasterxml.jackson.core:jackson-core:2.12.7 (from May 2022) which is included in the Apache Hadoop Client Runtime 3.4.2 is affected by CVE-2025-52999 (Score 8.7) and CVE-2025-49128 (Score 4.0).}}

{{Possible solution: Update to the latest Jackson version.}}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org