[KAFKA-13658] Upgrade vulnerable dependencies jan 2022

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.8.1
• Fix Version/s: 3.0.1, 3.2.0, 3.1.1
• Labels: secutiry
• Assignee: Unassigned
• Reporter: Shivakumar
• Created: 09/Feb/22 03:32
• Updated: 25/Jul/22 06:48
• Resolved: 02/Mar/22 09:32

Description

Packages	Package Version	CVSS	Fix Status
com.fasterxml.jackson.core_jackson-databind	2.10.5.1	7.5	fixed in 2.14, 2.13.1, 2.12.6

Our security scan detected the above vulnerabilities

upgrade to correct versions for fixing vulnerabilities

Issue Links

• is a clone of: KAFKA-13579 Upgrade vulnerable dependencies
• is cloned by: KAFKA-13805 Upgrade vulnerable dependencies march 2022
• is cloned by: KAFKA-14100 Upgrade vulnerable dependencies Kafka version 3.1.1 July 2022