awslabs / dynamodb-streams-kinesis-adapter

The Amazon DynamoDB Streams Adapter implements the Amazon Kinesis interface so that your application can use KCL to consume and process data from a DynamoDB stream.
Apache License 2.0
99 stars 37 forks source link

Vulnerabilities found in com.fasterxml.jackson.core:jackson-databind #50

Closed allanh1193 closed 1 year ago

allanh1193 commented 2 years ago

Hello, I'm working to solve different vulnerabilities in my current project. This project is using this library to work with stream reading. The problem I have is because you're using com.fasterxml.jackson.core:jackson-databind:2.9.10.7 and that version has a lot of vulnerabilities. You can see them in the following link: https://mvnrepository.com/artifact/com.amazonaws/dynamodb-streams-kinesis-adapter/1.5.3 I would like to know if you're going to update your last version of this library or if you have a new library I can use as an alternative or something like that. Thanks!