[
https://issues.apache.org/jira/browse/KARAF-7523?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Anthony Wood closed KARAF-7523.
-------------------------------
Resolution: Duplicate
Duplicate of KARAF-7452
> Upgrade to jackson 2.13.3
> -------------------------
>
> Key: KARAF-7523
> URL: https://issues.apache.org/jira/browse/KARAF-7523
> Project: Karaf
> Issue Type: Dependency upgrade
> Components: karaf
> Reporter: Anthony Wood
> Priority: Major
> Fix For: 4.3.8, 4.4.2
>
>
> Vulnerability scanners are still flagging karaf due to jackson 2.13.2's
> vulnerability to CVE-2020-36518. That issue was fixed in [jackson
> 2.13.3|https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13.3].
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
