Skip to content

Update jackson-databind dependency to 2.9.8#388

Open
jacinpoz wants to merge 1 commit intoNetflix:masterfrom
jacinpoz:jackson-databind-upgrade
Open

Update jackson-databind dependency to 2.9.8#388
jacinpoz wants to merge 1 commit intoNetflix:masterfrom
jacinpoz:jackson-databind-upgrade

Conversation

@jacinpoz
Copy link

@jacinpoz jacinpoz commented Feb 4, 2019

jackson-databind 2.4.3 contains vulnerabilities and any projects depending on com.netflix.governator:governator will show them when running dependency check reports. Upgrading jackson-databind 2.9.8 does not seem to cause any issues and fixes the problem.

jackson-databind-2 4 3-vulnerabilities
jackson-databind-2 4 3-vulnerabilities-cw-184
jackson-databind-2 4 3-vulnerabilities-cwe-502

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

Comments