CVE dependancies security breaches (Kotlin, jackson databind)

mbknor / mbknor-jackson-jsonSchema

Generate JSON Schema with Polymorphism using Jackson annotations

MIT License

232 stars 75 forks source link

CVE dependancies security breaches (Kotlin, jackson databind) #162

Open leccyril opened 2 years ago

leccyril commented 2 years ago

We are using your great lib, but unfortunately there is 2 breaches, one CVE is directly available on mavenrepository website about jackson databind version

and the other is about kotlin version, currently you import version 1.3.5 but we are now in 1.6

could you fix the issues ?

https://nvd.nist.gov/vuln/detail/CVE-2020-29582