[ https://issues.apache.org/jira/browse/TINKERPOP-2809?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17614215#comment-17614215 ]
Ken Hu commented on TINKERPOP-2809: ----------------------------------- Hi [~acoady], Thanks for your continuous reporting of security vulnerabilities in libraries used by TinkerPop. Would you like to contribute a PR for this? > High severity security vulnerability found in jackson databind > -------------------------------------------------------------- > > Key: TINKERPOP-2809 > URL: https://issues.apache.org/jira/browse/TINKERPOP-2809 > Project: TinkerPop > Issue Type: Bug > Components: server > Affects Versions: 3.6.1 > Reporter: Aaron Coady > Priority: Major > > Two High security vulnerabilities in jackson databind. Here are the two > links. > [https://nvd.nist.gov/vuln/detail/CVE-2022-42003] > [https://nvd.nist.gov/vuln/detail/CVE-2022-42004] > Fixes are in 2.14.0 -- This message was sent by Atlassian Jira (v8.20.10#820010)