[ https://issues.apache.org/jira/browse/ZOOKEEPER-4505?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Edwin Hobor updated ZOOKEEPER-4505: ----------------------------------- Description: *CVE-2020-36518* vulnerability affects jackson-databind in Zookeeper (see [https://github.com/advisories/GHSA-57j2-w4cx-62h2]). Upgrading to jackson-databind version *2.13.2.1* should address this issue. was: *CVE-2020-36518* vulnerability affects jackson-databind in Zookeeper (see [https://github.com/advisories/GHSA-57j2-w4cx-62h2]). Upgrading to jackson-databind versionĀ *2.12.6.1* or *2.13.2.1* should address this issue. > CVE-2020-36518 - Upgrade jackson databind to 2.13.2.1 > ----------------------------------------------------- > > Key: ZOOKEEPER-4505 > URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4505 > Project: ZooKeeper > Issue Type: Bug > Reporter: Edwin Hobor > Priority: Major > Labels: security > > *CVE-2020-36518* vulnerability affects jackson-databind in Zookeeper (see > [https://github.com/advisories/GHSA-57j2-w4cx-62h2]). > Upgrading to jackson-databind version *2.13.2.1* should address this issue. -- This message was sent by Atlassian Jira (v8.20.1#820001)