https://bugzilla.redhat.com/show_bug.cgi?id=1887664
--- Comment #35 from Jonathan Christison <jochrist(a)redhat.com> ---
Marking Red Hat Camel K as having a moderate impact, although Camel K
distributes affected versions of jackson-databind its use is not susceptible to
the vulnerability as there is nothing that deserializes XML from JSON in such a
way that the underlying DOMDeserializer is implicitly used.
--
You are receiving this mail because:
You are on the CC list for the bug.