Vulnerability in 2.9.9.3

[prashantLio]

Hi,
We are using the latest version (Non-Beta) of Jackson data-bind (2.9.9.3) and we are facing security issues in it. Can we know when will the next stable build be released.
Below is the list of vulnerabilities,
CVE-2019-16335
CVE-2019-14540
sonatype-2019-0371

Is there any other way around for getting over this vulnerabilities.

[jdelta-RBS]

Try going to the issues and there's patches for each:
#2410
#2448
#2449

[cowtowncoder]

@prashantLio Please do not use issue tracker for usage questions. This is what:

• https://groups.google.com/forum/#!forum/jackson-user (mailing list)
• https://gitter.im/home/explore (gitter chat room)

are for.

Also do note that whether these are applicable to you or not depends on your usage -- most users are not affected: https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062

But finally: 2.9.10 was just released. Upgrade to that. It has fixes from 2.9.9.3 and beyond.