[
https://issues.apache.org/jira/browse/FLINK-37078?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
ASF GitHub Bot updated FLINK-37078:
-----------------------------------
Labels: pull-request-available (was: )
> Update jackson-mapper-asl dependency
> ------------------------------------
>
> Key: FLINK-37078
> URL: https://issues.apache.org/jira/browse/FLINK-37078
> Project: Flink
> Issue Type: Bug
> Components: FileSystems
> Reporter: Anupam Aggarwal
> Assignee: Anupam Aggarwal
> Priority: Minor
> Labels: pull-request-available
>
> Flink includes org.codehaus.jackson:jackson-mapper-asl:1.9.13 which contains
> [CVE-2019-10202|https://nvd.nist.gov/vuln/detail/cve-2019-10202]
> There seems to be a version -
> org.codehaus.jackson/jackson-mapper-asl/1.9.14.jdk17-redhat-00001 (in redhat
> GA repository) which is not flagged as vulnerable
> More details at [https://nvd.nist.gov/vuln/detail/cve-2019-10202]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
