SikuliX

Security Vulnerability in jackson-databind

Asked by Krystian Piecko

Hi,
I wanted to ask about the Critical Vulnerability jackson-databind. Can we modify the Maven repository to use a newer version? Currently, we can see com.fasterxml.jackson.core in jackson-databind as a Critical one.

Easy fix, or not?

Krystian

Question information

Language:
English Edit question
Status:
Answered
For:
SikuliX Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
kailandrew (kailandrew) said : 		#2

Yes, updating `jackson-databind` to a newer version in the Maven repository should be a reliable fix for the critical vulnerability in `com.fasterxml.jackson.core`. i.e: https://plumberlancaster.org.uk/

Can you help with this problem?

Provide an answer of your own, or ask Krystian Piecko for more information if necessary.

To post a message you must log in.