Karen Coppage created HIVE-23338: ------------------------------------ Summary: Bump jackson-databind version up to 2.9.10.4 Key: HIVE-23338 URL: https://issues.apache.org/jira/browse/HIVE-23338 Project: Hive Issue Type: Improvement Reporter: Karen Coppage Assignee: Karen Coppage
com.fasterxml.jackson.core:jackson-databind:2.9.9 is exploitable. And exclude a transitive dependency on com.fasterxml.jackson.core:jackson-databind:2.6.5, which is also exploitable. -- This message was sent by Atlassian Jira (v8.3.4#803005)