javasofastack/sofa-jraft #469Not a task: already works

The potential security risk of jackson-databind.

envgap__sofastack__sofa-jraft-469

Original GitHub issue ↗Dated source checkout ↗Opened 2020-06-19

01 / FAILURE SIGNATURE

As reported upstream

No identifying execution failure has been captured.

Not a benchmark task.

The project already builds and runs before the fix, so there is nothing to repair.

02 / ENVIRONMENT RECIPE

Base commit: df289b1ae803f1ccd1abf6d6bc91a74142a5f3e5
Manifest: jraft-example/pom.xml
Reproduce: Awaiting issue-specific recipe
Run under trace: Awaiting a meaningful runtime command

03 / ORIGINAL ISSUE TEXT

sofastack/sofa-jraft #469 · read the original issue

Your question

There exists some network security risk of jackson-databind.



Your scenes

There exists some network security risk of jackson-databind.



Your advice

I will upgrade the version of jackson-databind to solve the potential security risks.



Environment

SOFAJRaft version:

JVM version (e.g. java -version):

OS version (e.g. uname -a):

Maven version:

IDE version:

Continue on GitHub ↗

04 / LABELS

Labels from the report text only; not yet run

No supported category has been assigned.

Label rules and the text that matched

[]