[ZOOKEEPER-3405] owasp flagging jackson-databind

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 3.6.0, 3.5.5
• Fix Version/s: 3.6.0, 3.5.6
• Labels: pull-request-available
• Assignee: Patrick D. Hunt
• Reporter: Patrick D. Hunt
• Created: 28/May/19 21:21
• Updated: 16/Oct/19 18:58
• Resolved: 30/May/19 13:56

Description

Owasp job is flagging jackson-databind for update:

CVE-2019-12086 CWE-200 Information Exposure Medium(5.0) jackson-databind-2.9.8.jar

Issue Links

• links to: GitHub Pull Request #962