jackson-databind 2.13.2.1 (CVE-2020-36518)

Description

Bump jackson-databind from 2.13.1 to 2.13.2.1 fixing https://nvd.nist.gov/vuln/detail/CVE-2020-36518

Use

to check that it actually works, MODPUBSUB-231 hasn't updated jackson-databind because of other modules downgrading the version.

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Checklist

hide

TestRail: Results

Activity

Show:

Craig McNally April 28, 2022 at 3:36 PM

FYI

Craig McNally April 28, 2022 at 3:35 PM

The security team has reviewed this and assigned a priority.

Done

Details

Assignee

Reporter

Labels

Priority

Story Points

Sprint

Development Team

Vega

Fix versions

RCA Group

TBD

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created April 22, 2022 at 10:25 AM
Updated May 9, 2022 at 4:41 PM
Resolved May 2, 2022 at 8:17 PM
TestRail: Cases
TestRail: Runs