[KARAF-7523] Upgrade to jackson 2.13.3 - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Dependency upgrade
Status: Closed
Priority: Major
Resolution: Duplicate
Affects Version/s: None
Fix Version/s: 4.3.8, 4.4.2
Component/s: karaf
Labels:
None

Target Version/s:

4.3.8, 4.4.2

Description

Vulnerability scanners are still flagging karaf due to jackson 2.13.2's vulnerability to CVE-2020-36518. That issue was fixed in jackson 2.13.3.

Attachments

Activity

People

Assignee:: Unassigned

Reporter:: Anthony Wood

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 27/Jul/22 17:53

Updated:: 27/Jul/22 17:55

Resolved:: 27/Jul/22 17:55