[WW-5038] Upgrade jackson-databind to version 2.9.9.3

• Type: Dependency
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 2.5.22, 6.0.0
• Component/s: Plugin - REST
• Assignee: Lukasz Lenart
• Reporter: Lukasz Lenart
• Created: 06/Sep/19 07:38
• Updated: 02/Nov/21 06:07
• Resolved: 07/Sep/19 12:24

Description

One or more dependencies were identified with known vulnerabilities in Struts 2 REST Plugin:

jackson-databind-2.9.8.jar (cpe:/a:fasterxml:jackson:2.9.8, cpe:/a:fasterxml:jackson-databind:2.9.8, com.fasterxml.jackson.core:jackson-databind:2.9.8) : CVE-2019-14379, CVE-2019-12814, CVE-2019-14439, CVE-2019-12086, CVE-2019-12384

Issue Links

• is superceded by: WW-5042 Upgrade jackson-databind to version 2.10.0
• links to: GitHub Pull Request #365