Hi,

I wanted to build CAS today, but failed to build in my company's CI system. 
Dependency check shows the fact that CAS 5.3.x is using a volnerable 
jackson version 2.9.5 (which is less than 2.9.9).

How can I fix this vulnerability? Can I just specify jackson 2.9.9 in 
build.gradle of cas-overlay-template? I am worrying about it, will my 
service be broken because of upgrading jackson version?

Many thanks to you.

James

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/06ba3d51-36c5-41c2-9a4e-3e49c832d586%40apereo.org.

Reply via email to