Alexander Veit created HDFS-17825:
-------------------------------------
Summary: hadoop-client-runtime vulnerabilities from jackson-core
2.12.7
Key: HDFS-17825
URL: https://issues.apache.org/jira/browse/HDFS-17825
Project: Hadoop HDFS
Issue Type: Bug
Affects Versions: 3.4.2
Reporter: Alexander Veit
{{com.fasterxml.jackson.core:jackson-core:2.12.7 (from May 2022) which is
included in the Apache Hadoop Client Runtime 3.4.2 is affected by
CVE-2025-52999 (Score 8.7) and CVE-2025-49128 (Score 4.0).}}
{{Possible solution: Update to the latest Jackson version.}}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
