inventory-hub-java-on-azure icon indicating copy to clipboard operation
inventory-hub-java-on-azure copied to clipboard

There is a vulnerability in jackson-databind 1.9.13,upgrade recommended

Open QiAnXinCodeSafe opened this issue 4 years ago • 0 comments

https://github.com/microsoft/inventory-hub-java-on-azure/blob/1c2cfa5159d60c24ef391267fe95cd6bb01e9b0e/dashboard-web-app/pom.xml#L117

CVE-2019-14893 CVE-2018-7489 CVE-2019-17267 CVE-2019-16335 CVE-2019-14540

Recommended upgrade version:2.9.10.3

QiAnXinCodeSafe avatar Jan 22 '21 08:01 QiAnXinCodeSafe