You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tinkerpop.apache.org by "Aaron Coady (Jira)" <ji...@apache.org> on 2022/10/06 12:54:00 UTC

[jira] [Created] (TINKERPOP-2809) High severity security vulnerability found in jackson databind

Aaron Coady created TINKERPOP-2809:
--------------------------------------

             Summary: High severity security vulnerability found in jackson databind
                 Key: TINKERPOP-2809
                 URL: https://issues.apache.org/jira/browse/TINKERPOP-2809
             Project: TinkerPop
          Issue Type: Bug
          Components: server
    Affects Versions: 3.6.1
            Reporter: Aaron Coady


Two High security vulnerabilities in jackson databind. Here are the two links. 
[https://nvd.nist.gov/vuln/detail/CVE-2022-42003]
[https://nvd.nist.gov/vuln/detail/CVE-2022-42004]
Fixes are in 2.14.0



--
This message was sent by Atlassian Jira
(v8.20.10#820010)