search

incodehq / incode-platform

Combines incode.org modules and isisaddons.org into a single set of modules.
http://platform.incode.org
Apache License 2.0
8 stars 9 forks source link

Remove camel-jackson vulnerability #102

Open danhaywood opened 5 years ago

danhaywood commented 5 years ago

as per https://github.com/incodehq/incode-platform/network/alert/modules/pom.xml/org.apache.camel:camel-jackson/open

org.apache.camel:camel-jackson Open GitHub opened this alert on 17 Oct 2018 1 org.apache.camel:camel-jackson vulnerability found in modules/pom.xml on 17 Oct 2018 Remediation Upgrade org.apache.camel:camel-jackson to version 2.16.5 or later. For example:

org.apache.camel camel-jackson [2.16.5,)

Always verify the validity and compatibility of suggestions with your codebase.

Details CVE-2016-8749 More information high severity Vulnerable versions: < 2.16.5 Patched version: 2.16.5 Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.