Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

jackson-databind < 2.9.10 has many CVEs filed against it. #582

Closed
llamahunter opened this issue Nov 3, 2019 · 1 comment
Closed

jackson-databind < 2.9.10 has many CVEs filed against it. #582

llamahunter opened this issue Nov 3, 2019 · 1 comment
Labels
v2

Comments

@llamahunter
Copy link

Please upgrade the jackson-databind dependency to a newer version.
gorzell added a commit that referenced this issue Dec 29, 2019
@gorzell
jackson: Upgrade to a much more current version.
40c3db5 
Closes #582.

This should be relatively safe given the semantic versioning, and help
help improve security as mentioned in the issue, in addition to probably
providing a lot of bug and other fixes.
@gorzell gorzell mentioned this issue Dec 29, 2019
Closed
gorzell added a commit that referenced this issue Dec 29, 2019
@gorzell
jackson: Upgrade to a much more current version.
bdcd9c0 
Closes #582.

This should be relatively safe given the semantic versioning, and help
help improve security as mentioned in the issue, in addition to probably
providing a lot of bug and other fixes.
@gorzell gorzell mentioned this issue Dec 29, 2019
Closed
@rgallardo-netflix
Copy link
Contributor

The original issue was opened against v1, but v2 should also get updated :-)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
v2
Projects
None yet
Milestone
No milestone
2 participants
@llamahunter @rgallardo-netflix