[CASSANDRA-18389] jackson-core-2.13.2.jar vulnerability: CVE-2022-45688

• Type: Bug
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 3.11.15, 4.0.9, 4.1.2, 5.0-alpha1, 5.0
• Component/s: Dependencies
• Bug Category: Security
• Severity: Normal
• Complexity: Normal
• Discovered By: Adhoc Test
• Platform: All
• Since Version: NA

Source Control Link

https://github.com/apache/cassandra/commit/d41e69a6527fd42d0c17ac4f5a0ecb81d00837ca

Test and Documentation Plan

run CI

• Assignee: Brandon Williams
• Reporter: Brandon Williams

Authors

Brandon Williams

Reviewers

Berenguer Blasi

• Created: 29/Mar/23 16:03
• Updated: 12/Sep/23 13:03
• Resolved: 03/Apr/23 11:11

Description

This is currently failing in the OWASP scan.