aholowko opened a new issue #1933:
URL: https://github.com/apache/helix/issues/1933


   ### Description
   
   In the **helix/zookeeper-api** is a dependency to 
org.codehaus.jackson:jackson-mapper-asl:1.9.13 that leads to critical 
vulnerability:
   
   [CVE-2019-17267](https://nvd.nist.gov/vuln/detail/CVE-2019-17267)
   
   ### Analysis
   
   The old Jackson API is used only in a few places and most of the changes are 
quite straightforward and require only changing an import statement to use 
classes from the new version of Jackson library.
   
   ### Recommendation
   
   * remove affected dependency
   * adjust code using old API to use new classes
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to