The potential security risk of jackson-databind.
envgap__sofastack__sofa-jraft-445
01 / FAILURE SIGNATURE
As reported upstream
No identifying execution failure has been captured.
Not a benchmark task.
- The project already builds and runs before the fix, so there is nothing to repair.
02 / ENVIRONMENT RECIPE
- Base commit
cf626b8e238a5e789164f489cca14cfee14b2bfd- Manifest
jraft-example/pom.xml- Reproduce
Awaiting issue-specific recipe- Run under trace
Awaiting a meaningful runtime command
03 / ORIGINAL ISSUE TEXT
sofastack/sofa-jraft #445 · read the original issue
### Your question There exists some network security risk of jackson-databind. ### Your scenes There exists some network security risk of jackson-databind. ### Your advice I will upgrade the version of jackson-databind to solve the potential security risks. ### Environment - SOFAJRaft version: - JVM version (e.g. `java -version`): - OS version (e.g. `uname -a`): - Maven version: - IDE version:
04 / LABELS
Labels from the report text only; not yet run
No supported category has been assigned.
Label rules and the text that matched
[]