Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

jackson: Upgrade to a much more current version. #584

Closed
wants to merge 1 commit into from

Conversation

gorzell
Copy link
Contributor

@gorzell gorzell commented Dec 29, 2019

Closes #582.

This should be relatively safe given the semantic versioning, and help
help improve security as mentioned in the issue, in addition to probably
providing a lot of bug and other fixes.

Closes #582.

This should be relatively safe given the semantic versioning, and help
help improve security as mentioned in the issue, in addition to probably
providing a lot of bug and other fixes.
@rgallardo-netflix
Copy link
Contributor

1.x is deprecated and won't receive updates anymore.

@rgallardo-netflix
Copy link
Contributor

We did end up updating jackson anyway, to 2.10.3

@rgallardo-netflix rgallardo-netflix deleted the gorzell/upgrade-jackson branch May 22, 2024 18:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

jackson-databind < 2.9.10 has many CVEs filed against it.
2 participants