[ 
https://issues.apache.org/jira/browse/CASSANDRA-15828?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17179460#comment-17179460
 ] 

Mark Denihan commented on CASSANDRA-15828:
------------------------------------------

[~c3-keveker] I'm pretty sure you can if this ticket was targeted for 3.11

[~brandon.williams] Thanks for the suggestion. I'll create a ticket for 2.2 and 
see if swapping over the dependency is a straight forward fix and doesn't break 
anything

> Remove jackson-mapper-asl-1.9.13 to address CVE
> -----------------------------------------------
>
>                 Key: CASSANDRA-15828
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-15828
>             Project: Cassandra
>          Issue Type: Improvement
>            Reporter: Kevin Eveker
>            Priority: Normal
>
> Recent scan results identified the following CVE that require this upgrade to 
> address
> [https://nvd.nist.gov/vuln/detail/CVE-2019-10172]



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to