Merged. Thanks David!
> On Aug 31, 2026, at 05:03, Dávid Paksy <[email protected]> wrote: > > Hi Andor, > > Sure, opened https://issues.apache.org/jira/browse/ZOOKEEPER-5083 and a PR > for this. > > Can you please have a look? > > Many thanks, > Dávid > > Andor Molnár <[email protected]> ezt írta (időpont: 2026. aug. 27., Cs, > 23:03): > >> Hi all, >> >> OWASP build is working again on master, thanks to Yurii! >> We upgraded Jetty and JLine recently, now only jackson-databind is flagged >> on the branch. >> >> 15:52:44 jackson-databind-2.18.8.jar >> (pkg:maven/com.fasterxml.jackson.core/[email protected], >> cpe:2.3:a:fasterxml:jackson-core:2.18.8:*:*:*:*:*:*:*, >> cpe:2.3:a:fasterxml:jackson-databind:2.18.8:*:*:*:*:*:*:*, >> cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.8:*:*:*:*:*:*:*) : >> CVE-2026-54515 >> >> Somebody willing to upgrade it? >> >> Regards, >> >> Andor >> >> >>
