You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I encountered the Jackson package issue which is too old. My case is I am trying akka to use vavr data structure in akka's entity state. issue comes from serialization. I managed to resolve it by creating my own snapshot version with updated Jackson package to 2.17.3 and all test PASSED.
Since there are vulnerabilities in existing version 2.7.2 and I saw the version is upgraded in version/1.x branch. according the newest post in vavr discussion. It seems the main branch should have upgraded version of Jackson. Is there anything we can help for new release of 0.X version?
The
Jackson
package causes reliability issues because of a vulnerability.The version
2.14.2
is vulnerable to Denial of Service (DoS).This can be fixed by updating the library to
2.15.0
https://security.snyk.io/package/maven/com.fasterxml.jackson.core:jackson-databind
The text was updated successfully, but these errors were encountered: