[
https://issues.apache.org/jira/browse/HBASE-22778?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16898991#comment-16898991
]
Wei-Chiu Chuang commented on HBASE-22778:
-----------------------------------------
How about removing jackson-databind dependency? It looks like it is mostly used
in test code.
> Upgrade jasckson databind to 2.9.9.2
> ------------------------------------
>
> Key: HBASE-22778
> URL: https://issues.apache.org/jira/browse/HBASE-22778
> Project: HBase
> Issue Type: Bug
> Components: dependencies
> Reporter: Duo Zhang
> Priority: Blocker
>
> Due to this CVE
> https://nvd.nist.gov/vuln/detail/CVE-2019-14379
--
This message was sent by Atlassian JIRA
(v7.6.14#76016)
