[ https://issues.apache.org/jira/browse/MSHADE-418?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Karl Heinz Marbaise updated MSHADE-418: --------------------------------------- Fix Version/s: waiting-for-feedback > Jackson-databind version is being picked as 2.12.6 instead of 2.12.6.1 > ----------------------------------------------------------------------- > > Key: MSHADE-418 > URL: https://issues.apache.org/jira/browse/MSHADE-418 > Project: Maven Shade Plugin > Issue Type: Bug > Affects Versions: 3.3.0 > Reporter: Saikrishna Kosna > Priority: Major > Fix For: waiting-for-feedback > > Attachments: pom.xml > > > There was a security issue in jackson-databind, which needs to be upgraded to > 2.12.6.1 version. When the version is updated and the Jar file is generated, > the security issue still exists as part of the Jar file and the version is > being shown as 2.12.6 instead of 2.12.6.1. Attaching the pom.xml file, > please let me know if I am doing something wrong. -- This message was sent by Atlassian Jira (v8.20.10#820010)