Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remediate High Jackson vulnerability #109

Open
Lilalamar opened this issue Jan 28, 2020 · 0 comments
Open

Remediate High Jackson vulnerability #109

Lilalamar opened this issue Jan 28, 2020 · 0 comments
Assignees
@NoopDog
Milestone
Q1 2020 Milestone 2

Comments

@Lilalamar
Copy link

Snyk reports the following High severity vulnerability in HumanCellAtlas/data-consumer-vignettes. Please remediate by the end of Q1 Milestone 2.

Description
com.fasterxml.jackson.core:jackson-databind

Suggested Remediation
Upgrade com.fasterxml.jackson.core:jackson-databind to version 2.10.0.pr3, 2.9.10 or higher.

Details
com.fasterxml.jackson.core:jackson-databind is a library which contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Affected versions of this package are vulnerable to Deserialization of Untrusted Data. Two additional net.sf.ehcache gadgets are not blacklisted.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@NoopDog NoopDog

Labels
None yet
Projects
None yet
Milestone
Q1 2020 Milestone 2
Development

No branches or pull requests
2 participants
@NoopDog @Lilalamar