[ 
https://issues.apache.org/jira/browse/CASSANDRA-18389?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17707823#comment-17707823
 ] 

Berenguer Blasi commented on CASSANDRA-18389:
---------------------------------------------

Failures look unrelated. +1.

I just noticed we add suppressions as we're not using some methods. But that 
doesn't prevent usage of that same method in the future. I wonder if we could 
think of some way to make a build fail when sbdy tried to use an offending 
method in the future... 

> jackson-core-2.13.2.jar vulnerability: CVE-2022-45688
> -----------------------------------------------------
>
>                 Key: CASSANDRA-18389
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-18389
>             Project: Cassandra
>          Issue Type: Bug
>          Components: Dependencies
>            Reporter: Brandon Williams
>            Assignee: Brandon Williams
>            Priority: Normal
>             Fix For: 3.11.x, 4.0.x, 4.1.x, 5.x
>
>
> This is currently failing in the OWASP scan.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to