You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jira@kafka.apache.org by "fvaleri (via GitHub)" <gi...@apache.org> on 2026/07/09 10:02:16 UTC

[PR] KAFKA-20773: Bump jackson to 2.21.5 [kafka]

fvaleri opened a new pull request, #22793:
URL: https://github.com/apache/kafka/pull/22793

   This patch fixes a Jackson Databind vulnerability reported in:
   
   https://nvd.nist.gov/vuln/detail/CVE-2026-54515
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] KAFKA-20773: Bump jackson to 2.21.5 [kafka]

Posted by "mimaison (via GitHub)" <gi...@apache.org>.

mimaison commented on PR #22793:
URL: https://github.com/apache/kafka/pull/22793#issuecomment-4925853964

   Backported to:
   - 4.3: https://github.com/apache/kafka/commit/1d2e1cb8bd416bd16cae61386cda9f7d0006813c
   - 4.2: https://github.com/apache/kafka/commit/1c58ed31936c864101f68d925dc249a1aeb49f83
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] KAFKA-20773: Bump jackson to 2.21.5 [kafka]

Posted by "mimaison (via GitHub)" <gi...@apache.org>.

mimaison merged PR #22793:
URL: https://github.com/apache/kafka/pull/22793


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org