[
https://issues.apache.org/jira/browse/MSHADE-418?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Karl Heinz Marbaise updated MSHADE-418:
---------------------------------------
Fix Version/s: waiting-for-feedback
> Jackson-databind version is being picked as 2.12.6 instead of 2.12.6.1
> -----------------------------------------------------------------------
>
> Key: MSHADE-418
> URL: https://issues.apache.org/jira/browse/MSHADE-418
> Project: Maven Shade Plugin
> Issue Type: Bug
> Affects Versions: 3.3.0
> Reporter: Saikrishna Kosna
> Priority: Major
> Fix For: waiting-for-feedback
>
> Attachments: pom.xml
>
>
> There was a security issue in jackson-databind, which needs to be upgraded to
> 2.12.6.1 version. When the version is updated and the Jar file is generated,
> the security issue still exists as part of the Jar file and the version is
> being shown as 2.12.6 instead of 2.12.6.1. Attaching the pom.xml file,
> please let me know if I am doing something wrong.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
