[ https://issues.apache.org/jira/browse/CASSANDRA-17231?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Michael Semb Wever updated CASSANDRA-17231: ------------------------------------------- Summary: Upgrade cassandra-driver-core to 3.12.1 (was: Upgrade cassandra-driver-core to 4.X) > Upgrade cassandra-driver-core to 3.12.1 > --------------------------------------- > > Key: CASSANDRA-17231 > URL: https://issues.apache.org/jira/browse/CASSANDRA-17231 > Project: Apache Cassandra > Issue Type: Bug > Components: Dependencies > Reporter: Phyllis Li > Assignee: Phyllis Li > Priority: Normal > Labels: security > Fix For: 5.x > > Attachments: > ci_summary_thelastpickle_mck-17231-5.0_204.html.download.zip, > results_details_thelastpickle_mck-17231-5.0_204.tar.xz > > > The current Cassandra driver version is 3.11.0, which uses a vulnerable > version of jackson-databind. > We may want to switch to the re-branded com.datastax.oss:java-driver-core > 4.13.0. -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org