Published
Last updated
druid
Status
Impact
Jackson-core is pinned at 2.12.7 for this Druid tagged version: https://github.com/apache/druid/blob/druid-33.0.0/licenses.yaml#L226. We need to wait for upstream to bump it in order to fix this vulnerability.