Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-15907551
|
This is a major upgrade of the Jackson JSON processing library, spanning from version 2.9.x to 2.21.2. This update introduces significant breaking changes, new features, and important security enhancements. Due to the large version jump, a thorough review and testing are required. Key Breaking Changes:
Recommendation: Given the breadth of these changes, this upgrade must be treated with caution.
|
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
Snyk has created this PR to fix 1 vulnerabilities in the maven dependencies of this project.
Snyk changed the following file(s):
pom.xmlVulnerabilities that will be fixed with an upgrade:
SNYK-JAVA-COMFASTERXMLJACKSONCORE-15907551
2.9.5->2.21.2com.fasterxml.jackson.core:jackson-databind:
2.9.5->2.21.2com.fasterxml.jackson.dataformat:jackson-dataformat-xml:
2.9.4->2.21.2com.fasterxml.jackson.datatype:jackson-datatype-guava:
2.9.5->2.21.2com.fasterxml.jackson.datatype:jackson-datatype-jdk8:
2.8.6->2.21.2No Path FoundNo Known ExploitBreaking Change Risk
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Allocation of Resources Without Limits or Throttling