Saikrishna Kosna created MSHADE-418:
---------------------------------------
Summary: Jackson-databind version is being picked as 2.12.6
instead of 2.12.6.1
Key: MSHADE-418
URL: https://issues.apache.org/jira/browse/MSHADE-418
Project: Maven Shade Plugin
Issue Type: Bug
Affects Versions: 3.3.0
Reporter: Saikrishna Kosna
Attachments: pom.xml
There was a security issue in jackson-databind, which needs to be upgraded to
2.12.6.1 version. When the version is updated and the Jar file is generated,
the security issue still exists as part of the Jar file and the version is
being shown as 2.12.6 instead of 2.12.6.1. Attaching the pom.xml file, please
let me know if I am doing something wrong.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
