localstack
Chainguard
Status
Impact
The jackson-core jar is a part of the amazon-kclpy Python package dependency. As a transitive dependency, we are unable to bump the version or patch the CVE at this time. Upstream maintainers will need to make the appropriate change to resolve the CVE.
Status