search

Kyligence / calcite

a tailored Apache Calcite for Apache Kylin, more details at http://mail-archives.apache.org/mod_mbox/kylin-dev/201704.mbox/%3CCAF7etT=wEBPKm4C_6ffssQ0=kEhD=j1jz3O9DpjC+Zu9xWU=5A@mail.gmail.com%3E . Isn't AtopCalcite in Kylin enough? It depends on tomcat feature that's no longer supported in tomcat 8
Apache License 2.0
14 stars 53 forks source link

[Snyk] Upgrade com.fasterxml.jackson.core:jackson-databind from 2.6.3 to 2.12.2 #201

Open snyk-bot opened 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to upgrade com.fasterxml.jackson.core:jackson-databind from 2.6.3 to 2.12.2.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72884		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72883		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72882		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72451		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72450		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72449		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72448		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72447		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72446		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-72445		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-608664		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-572316		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-572300		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-570625		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-564888		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-564887		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561587		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561586		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561585		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561373		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-561362		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-560766		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-560762		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-559106		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-559094		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-548451		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-540500		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-472980		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-471943		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-469676		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-469674		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-467016		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-467015		 630/1000
Why? Has a fix available, CVSS 8.1		 Mature
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-467014		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-455617		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-450917		 630/1000
Why? Has a fix available, CVSS 8.1		 Mature
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-450207		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-32111		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-32044		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-32043		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-31573		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-31507		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-174736		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1061931		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056427		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056426		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056425		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056424		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056421		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056420		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056419		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056418		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056417		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056416		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056414		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052450		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052449		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
XML External Entity (XXE) Injection
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1048302		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1047324		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1009829		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-31520		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Denial of Service (DoS)
SNYK-JAVA-COMFASTERXMLJACKSONCORE-31519		 630/1000
Why? Has a fix available, CVSS 8.1		 No Known Exploit
Deserialization of Untrusted Data
SNYK-JAVA-COMFASTERXMLJACKSONCORE-1054588		 630/1000
Why? Has a fix available, CVSS 8.1		 Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs