Package
management-api-for-apache-cassandra-4.1
Component
jackson-databind
Latest update
Fixed version
0.1.109-r0
7.5
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Fixed version
0.1.109-r0Status
Fixed version
0.1.89-r0Status
Impact
To fix the CVE, we have to upgrade swagger-jaxrs2 to 2.2.0 or later but this fix will require some code change since the upgrade cause to build fail due to compilation errors like: src/main/java/com/datastax/mgmtapi/resources/LifecycleResources.java:[425,28] cannot access com.fasterxml.jackson.core.exc.StreamWriteException
Status
Status
Impact
To fix the CVE, we have to upgrade 'swagger-jaxrs2' to '2.2.0' or later but this fix will require some code change since the upgrade cause the build to fail due to compilation errors like: 'src/main/java/com/datastax/mgmtapi/resources/LifecycleResources.java:[425,28] cannot access com.fasterxml.jackson.core.exc.StreamWriteException'
Status