[CASSANDRA-17231] Upgrade cassandra-driver-core to 4.X

• Type: Bug
• Status: Open
• Priority: Normal
• Resolution: Unresolved
• Fix Version/s: 5.x
• Component/s: Dependencies
• Labels: security
• Bug Category: Security
• Severity: Normal
• Complexity: Normal
• Discovered By: User Report
• Assignee: Phyllis Li
• Reporter: Phyllis Li

Authors

Phyllis Li

• Created: 03/Jan/22 19:00
• Updated: 07/Jun/23 14:48

Description

The current Cassandra driver version is 3.11.0, which uses a vulnerable version of jackson-databind.

We may want to switch to the re-branded com.datastax.oss:java-driver-core 4.13.0.

Issue Links

• is related to: CASSANDRA-15750 Upgrade Cassandra Java Driver to 4.6
• relates to: CASSANDRA-14667 Upgrade Dropwizard Metrics to 4.x, logback to 1.2.12 and cassandra-driver-3.11.5