Pavel Moskotin created AVRO-3658:
------------------------------------
Summary: Bump jackson to address CVE-2020-36518
Key: AVRO-3658
URL: https://issues.apache.org/jira/browse/AVRO-3658
Project: Apache Avro
Issue Type: Improvement
Components: java
Affects Versions: 1.11.1
Reporter: Pavel Moskotin
Current version of Jackson dependency for AVRO/Java
{code:xml}
<jackson-bom.version>2.12.7.20221012</jackson-bom.version>
{code}
bringsĀ CVE-2020-36518.
This is covered by next versions, for example - in
{code:xml}
<jackson-bom.version>2.13.4</jackson-bom.version>
{code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)