[BEAM-7880] Upgrade Jackson databind to version 2.9.9.3 - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Triage Needed
Priority: P0
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 2.15.0
Component/s: build-system, sdk-java-core
Labels:
- Done

Description

Jackson databind 2.9.9 and earlier versions have multiple CVEs:

https://www.cvedetails.com/cve/CVE-2019-12814
https://www.cvedetails.com/cve/CVE-2019-12384
https://www.cvedetails.com/cve/CVE-2019-14379
https://www.cvedetails.com/cve/CVE-2019-14439

Attachments

Issue Links

links to

GitHub Pull Request #9229

GitHub Pull Request #9273

Activity

People

Assignee:: Ismaël Mejía

Reporter:: Ismaël Mejía

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 02/Aug/19 06:40

Updated:: 13/Apr/23 10:56

Resolved:: 06/Aug/19 09:46

Time Tracking

Estimated:

Not Specified

Remaining:

0h

Logged:

3h 10m