OpenAPITools / jackson-databind-nullable

JsonNullable wrapper class and Jackson module to support meaningful null values
Apache License 2.0
103 stars 30 forks source link

Fix CVE-2022-42003 #36

Closed animalet closed 2 years ago

animalet commented 2 years ago

jackson-databind 12.3 is affected by a security vulnerability. Upgrade to 2.14 fixes this. https://www.cve.org/CVERecord?id=CVE-2022-42003

animalet commented 2 years ago

@wing328 Is there an ETA for the release?

wing328 commented 2 years ago

I'll try to do it this weekend.

animalet commented 2 years ago

Thx!

wing328 commented 2 years ago

Released: https://central.sonatype.dev/artifact/org.openapitools/jackson-databind-nullable/0.2.4