jackson-databind < 2.9.10 has many CVEs filed against it.

Netflix / archaius

Library for configuration management API

Apache License 2.0

2.47k stars 486 forks source link

Closed llamahunter closed 1 year ago

llamahunter commented 5 years ago

Please upgrade the jackson-databind dependency to a newer version.

rgallardo-netflix commented 1 year ago

The original issue was opened against v1, but v2 should also get updated :-)