Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Duplicate
-
None
-
None
-
None
Description
according to CVE-2020-8840, maybe we should update jackson-databind to 2.9.10.3 or 2.10.x?*
Attachments
Issue Links
- duplicates
-
HADOOP-16891 Upgrade jackson-databind to 2.9.10.3
- Resolved
- is related to
-
HADOOP-16485 Remove dependency on jackson
- Open