search

snowplow / snowplow-java-tracker

Snowplow event tracker for Java. Add analytics to your Java desktop and server apps, servlets and games. (See also: snowplow-android-tracker)
http://snowplowanalytics.com
Apache License 2.0
23 stars 36 forks source link

Update jackson-databind #360

Closed aki-kesulahti closed 7 months ago

aki-kesulahti commented 1 year ago

Current version has Vulnerabilities: https://mvnrepository.com/artifact/com.snowplowanalytics/snowplow-java-tracker/1.0.0 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42003 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42004

Update jackson-databind to latest version https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind

matus-tomlein commented 7 months ago

We have upgraded to version 2.16.1 in release v2 of the tracker.