Create
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
Products
See all
Community resources
Interests
See all
Community resources
Top groups
Explore all groups
Community resources
It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Sign up for free Log in
Atlassian Community Hero Image Collage

Jira Rest Java Client - JRJC - CVE-2019-10172

Anthony Lee
Anthony Lee Jan 04, 2022

The JRJC uses Jackson 1.9 which is vulnerable due to CVE-2019-10172 and has no patched version of Jackson 1.9 to upgrade to. Any way to mitigate this? Any plans to upgrade to Jackson 2.x

Answer
Watch
Like Be the first to like this
101 views

1 answer

0 votes
Gonchik Tsymzhitov
Gonchik Tsymzhitov Community Leader Jan 04, 2022

Hi! 

one of the option make a fork and do changes and make a PR,

https://bitbucket.org/atlassian/jira-rest-java-client/src/master/

 

Cheers,

Gonchik 

Reply

Suggest an answer

Log in or Sign up to answer
Jira Software
Jira Software
DEPLOYMENT TYPE
CLOUD
PRODUCT PLAN
PREMIUM
TAGS
Community showcase
Sharon Tan
Sharon Tan
Published in Jira

Do you use Jira Cloud with Microsoft Teams?

Hi, Jira users! Do you use Jira alongside Microsoft Teams? We want to hear how you’ve used the power of Jira Cloud and Microsoft Teams (via the Jira Cloud for Microsoft Teams app) to achieve a team...

522 views 1 9
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you