[TOMEE-4066] Update jackson-databind to mitigate CVE-2022-42004 and CVE-2022-42003

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 8.0.12
• Fix Version/s: 8.0.13
• Component/s: TomEE Core Server
• Labels: CVE
• Assignee: Unassigned
• Reporter: RAJU THANNEERU
• Created: 06/Oct/22 08:05
• Updated: 06/Jan/23 12:12
• Resolved: 06/Jan/23 12:12

Description

Update jackson-databind to mitigate CVE-2022-42004 and CVE-2022-42003

https://nvd.nist.gov/vuln/detail/CVE-2022-42003

https://nvd.nist.gov/vuln/detail/CVE-2022-42004

 

 

Issue Links

• relates to: TOMEE-4067 Jackson 2.14.0-rc1