[TOMEE-3860] Upgrade jackson-databind for CVE-2020-36518

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Duplicate
• Affects Version/s: 8.0.10
• Fix Version/s: 8.0.11
• Labels: CVE
• Assignee: Unassigned
• Reporter: Yugandher reddy vonteddu
• Created: 22/Mar/22 10:11
• Updated: 10/Apr/22 07:20
• Resolved: 22/Mar/22 10:17

Description

jackson-databind-2.13.0-rc2.jar is vulnerable and should be upgraded.

https://nvd.nist.gov/vuln/detail/CVE-2020-36518

 

 

Issue Links

• duplicates: TOMEE-3856 Upgrade to jackson 2.13.2
• is related to: TOMEE-3893 Upgrade to jackson 2.13.2.2