[jira] [Created] (FLINK-29631) [CVE-2022-42003] flink-shaded-jackson

[Sergio Sainz (Jira)]

Sergio Sainz created FLINK-29631:
------------------------------------

             Summary: [CVE-2022-42003] flink-shaded-jackson
                 Key: FLINK-29631
                 URL: https://issues.apache.org/jira/browse/FLINK-29631
             Project: Flink
          Issue Type: Bug
          Components: BuildSystem / Shaded
    Affects Versions: shaded-16.0
            Reporter: Sergio Sainz


flink-shaded-jackson vulnerable to 7.5 (high) 
[https://nvd.nist.gov/vuln/detail/CVE-2022-42003]

 

Ref:

[https://nvd.nist.gov/vuln/detail/CVE-2022-42003]

[https://repo1.maven.org/maven2/org/apache/flink/flink-shaded/16.0/flink-shaded-16.0.pom]

[https://mvnrepository.com/artifact/org.apache.flink/flink-shaded-jackson-parent/2.13.4-16.0]

[https://repo1.maven.org/maven2/org/apache/flink/flink-shaded-jackson/2.13.4-16.0/flink-shaded-jackson-2.13.4-16.0.pom]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)