apache/submarine

here is a vulnerability in jackson-databind 1.9.13,upgrade recommended

QiAnXinCodeSafe opened this issue 4 years ago · 0 comments

QiAnXinCodeSafe commented 4 years ago

submarine/pom.xml

Line 120 in 3041ef2

<codehaus-jackson.version>1.9.13</codehaus-jackson.version>

CVE-2017-15095 CVE-2018-7489 CVE-2019-14540 CVE-2019-16335 CVE-2019-17267 CVE-2019-14893 CVE-2018-5968 CVE-2019-10172 CVE-2018-1000873
Recommended upgrade version：

2.6.7.4