[
https://issues.apache.org/jira/browse/DRILL-7682?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
James Turton closed DRILL-7682.
-------------------------------
Fix Version/s: 1.20.1
Resolution: Fixed
> Vulnerabilities in dependency Jackson-databind-2.9.10.jar
> ---------------------------------------------------------
>
> Key: DRILL-7682
> URL: https://issues.apache.org/jira/browse/DRILL-7682
> Project: Apache Drill
> Issue Type: Bug
> Affects Versions: 1.17.0
> Reporter: Derek Lohnes
> Priority: Major
> Fix For: 1.20.1
>
>
> Vulnerabilities in dependency Jackson-databind-2.9.10.jar
> Max CVSS Score: 9.8 (Critical)
> Total # CVEs: 10
> [https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Afasterxml&cpe_product=cpe%3A%2F%3Afasterxml%3Ajackson-databind&cpe_version=cpe%3A%2F%3Afasterxml%3Ajackson-databind%3A2.9.10]
>
> Are these vulnerabilities exploitable from Apache Drill?
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
