Tim Allison created TIKA-3869:
---------------------------------
Summary: Update jackson-databind when available
Key: TIKA-3869
URL: https://issues.apache.org/jira/browse/TIKA-3869
Project: Tika
Issue Type: Task
Reporter: Tim Allison
No sooner had the 2.5.0 release vote passed than another cve from
jackson-databind landed in ossindex. For details:
https://github.com/FasterXML/jackson-databind/issues/3590 and
https://nvd.nist.gov/vuln/detail/CVE-2022-42003
We should update jackson-databind when the next non-rc version is available.
I'll add this to the "ossindex-ignore" list so we can get a clean build for now.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
