[
https://issues.apache.org/jira/browse/CASSANDRA-17231?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17470829#comment-17470829
]
Brandon Williams commented on CASSANDRA-17231:
----------------------------------------------
Well, 3.11.0 _is_ the latest non-4.x driver:
https://github.com/datastax/java-driver/tags
I suspect we need to take the plunge to 4.x, but a very cursory attempt shows
indeed it will not be a quick drop-in replacement.
> Upgrade cassandra-driver-core to 4.X
> ------------------------------------
>
> Key: CASSANDRA-17231
> URL: https://issues.apache.org/jira/browse/CASSANDRA-17231
> Project: Cassandra
> Issue Type: Bug
> Components: Dependencies
> Reporter: Phyllis Li
> Assignee: Phyllis Li
> Priority: Normal
> Labels: security
> Fix For: 4.x
>
>
> The current Cassandra driver version is 3.11.0, which uses a vulnerable
> version of jackson-databind.
> We may want to switch to the re-branded com.datastax.oss:java-driver-core
> 4.13.0.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
