[ https://issues.apache.org/jira/browse/TINKERPOP-2016?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16568314#comment-16568314 ]
ASF GitHub Bot commented on TINKERPOP-2016: ------------------------------------------- Github user FlorianHockmann commented on the issue: https://github.com/apache/tinkerpop/pull/904 Ah ok, I didn't see that. I guess I'm still not really used to the way Maven works 😅 But in that case: VOTE +1 > Upgrade Jackson FasterXML to 2.9.5 or later to fix security vulnerability > ------------------------------------------------------------------------- > > Key: TINKERPOP-2016 > URL: https://issues.apache.org/jira/browse/TINKERPOP-2016 > Project: TinkerPop > Issue Type: Improvement > Affects Versions: 3.3.3, 3.2.9 > Reporter: Luke Daugherty > Assignee: Robert Dale > Priority: Major > > The jackson libraries included in groovy-shaded-3.3.3 have a CVE reported > against them so the library is reported as High risk by vulnerability > scanners such as Nexus. > *[CVE-2018-7489|http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7489]* -- This message was sent by Atlassian JIRA (v7.6.3#76005)