Closed kimxogus closed 4 years ago
Jackson support has been updated to 2.10.1 in the develop branch - https://github.com/twitter/finatra/commit/dc7072e53961407647d5bf22381a47316f278e62.
We've had to revert this upgrade and are working to move to Jackson 2.9.10.1 instead of 2.10.1 which should mitigate all open CVEs.
We've upgraded to 2.9.10(.1) on the develop branch, and will be doing a release most likely within the week.
As a further update, it's likely going to be a while before we can attempt to move Finatra to 2.10.1 again. There are some current internal blockers which need additional work, and I'm not sure yet when that will happen (as a different team is responsible there). We'll keep folks updated here when there's additional news. Thanks for your patience.
Thanks for updates 👍
Finatra has been updated to Jackson 2.11 in e265ba87c5ff6cecc88b65dd050e0cf1a23df698. This should be in the next release: 20.5.0.
Released in 20.5.0.
Support jackson 2.10
Expected behavior
Support jackson 2.10
Actual behavior
jackson 2.10 is not supported
Steps to reproduce the behavior