Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Update Jackson-databind to 2.9.10.6 #902

Closed
thanlok opened this issue Aug 27, 2020 · 1 comment
Closed

Update Jackson-databind to 2.9.10.6 #902

thanlok opened this issue Aug 27, 2020 · 1 comment
Assignees
@ivanopagano
Labels
refactor/tech-debt

Comments

@thanlok
Copy link

thanlok commented Aug 27, 2020 •
edited
Loading

The official Jack-databind has released a fix on possible vulnerabilities about the classes that allow performing non-accessible methods or accessing non-accessible data. Please update the dependency version to 2.9.10.6 or above.

The link to the related issue: https://medium.com/@cowtowncoder/jackson-2-10-safe-default-typing-2d018f0ce2ba

The link to official fix:FasterXML/jackson-databind#2814
@ivanopagano ivanopagano self-assigned this Sep 3, 2020
@ivanopagano ivanopagano mentioned this issue Sep 3, 2020
Merged
@ivanopagano
Copy link
Contributor

Closed by #905

# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees

@ivanopagano ivanopagano

Labels
refactor/tech-debt
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@ivanopagano @thanlok