Brian Stansberry created WFCORE-4864:
----------------------------------------
Summary: Bump the jackson databind test dep to 2.10.1 or 2.9.10.3
Key: WFCORE-4864
URL:
https://issues.redhat.com/browse/WFCORE-4864
Project: WildFly Core
Issue Type: Component Upgrade
Components: Security, Test Suite
Reporter: Brian Stansberry
Assignee: Brian Stansberry
Address
https://github.com/advisories/GHSA-gww7-p5w4-wrfv and
https://github.com/advisories/GHSA-4w82-r329-3q67
This is just a test dep but might as well clear these.
Full WildFly uses 2.10.1 so that's preferred. But if the test fixture that uses
databind doesn't work with that, go for 2.9.10.3.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)