Hi Andor, Sure, opened https://issues.apache.org/jira/browse/ZOOKEEPER-5083 and a PR for this.
Can you please have a look? Many thanks, Dávid Andor Molnár <[email protected]> ezt írta (időpont: 2026. aug. 27., Cs, 23:03): > Hi all, > > OWASP build is working again on master, thanks to Yurii! > We upgraded Jetty and JLine recently, now only jackson-databind is flagged > on the branch. > > 15:52:44 jackson-databind-2.18.8.jar > (pkg:maven/com.fasterxml.jackson.core/[email protected], > cpe:2.3:a:fasterxml:jackson-core:2.18.8:*:*:*:*:*:*:*, > cpe:2.3:a:fasterxml:jackson-databind:2.18.8:*:*:*:*:*:*:*, > cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.8:*:*:*:*:*:*:*) : > CVE-2026-54515 > > Somebody willing to upgrade it? > > Regards, > > Andor > > >
