You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tinkerpop.apache.org by "Robert Dale (JIRA)" <ji...@apache.org> on 2019/07/31 11:30:00 UTC

[jira] [Created] (TINKERPOP-2275) Update jackson databind 2.9.9.3+

Robert Dale created TINKERPOP-2275:
--------------------------------------

             Summary: Update jackson databind 2.9.9.3+
                 Key: TINKERPOP-2275
                 URL: https://issues.apache.org/jira/browse/TINKERPOP-2275
             Project: TinkerPop
          Issue Type: Improvement
          Components: io
    Affects Versions: 3.4.2, 3.3.7
            Reporter: Robert Dale
            Assignee: Robert Dale


 

Fixes more gadget vulnerabilities with ehcache and logback in the classpath. 

[https://app.snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-455617]

 

Note that the fix is in 2.9.9.2. However, that version broke things. Waiting for 2.9.9.3 to be released.  [https://github.com/FasterXML/jackson-databind/issues/2395]

 

TinkerPop is not directly affected hence low priority (let alone that the fix isn't even available).

 



--
This message was sent by Atlassian JIRA
(v7.6.14#76016)