[ZOOKEEPER-4505] CVE-2020-36518 - Upgrade jackson databind to 2.13.2.1

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.7.1, 3.6.4, 3.9.0, 3.8.1
• Labels: pull-request-available security
• Assignee: Unassigned
• Reporter: Edwin Hobor
• Created: 29/Mar/22 12:43
• Updated: 30/Jan/23 07:57
• Resolved: 31/Mar/22 18:24

Description

CVE-2020-36518 vulnerability affects jackson-databind in Zookeeper (see https://github.com/advisories/GHSA-57j2-w4cx-62h2).

Upgrading to jackson-databind version 2.13.2.1 should address this issue.

Issue Links

• links to: GitHub Pull Request #1842
• links to: GitHub Pull Request #1844
• links to: GitHub Pull Request #1845
• links to: GitHub Pull Request #1846