Till Rohrmann created FLINK-15864:
-------------------------------------
Summary: Upgrade jackson-databind dependency to 2.10.1 for
security reasons
Key: FLINK-15864
URL: https://issues.apache.org/jira/browse/FLINK-15864
Project: Flink
Issue Type: Sub-task
Components: Deployment / Kubernetes
Reporter: Till Rohrmann
Fix For: 1.11.0, 1.10.1
The module {{flink-kubernetes}} defines an explicit dependency on
{{jackson-databind:2.9.8}}. This is problematic since this jackson version
contains security vulnerabilities. See FLINK-14104 for more information.
If possible, I would suggest to remove the explicit version tag and to rely on
the parent's dependency management.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
