Details
-
Improvement
-
Status: Closed
-
Major
-
Resolution: Done
-
3.4.8
-
None
Description
Currently TinkerPop uses 2.9.10.5 version which has known security vulnerabilities.
As per guidance from Jackson-databind, 2.9.x is a non-active branch. To quote from https://github.com/FasterXML/jackson
2.9: non-active branch from which micro-patch releases (like 2.9.10.5) MAY be made for individual components (jackson-databind usually)
Backport 2.11.x from master to 3.4-dev