Logstash--jackson-databind vulnerabilities for logstash-7.9.0

Elastic Stack Logstash
1

We found vulnerabilities with logstash version 7.9.0 for jackson-databind.
below are the few CVE's for the versions:
CVE-2020-24750
CVE-2017-18640
CVE-2020-24616
CVE-2020-14195
CVE-2020-14060
CVE-2020-14062
CVE-2020-14061
CVE-2017-18640
These are all listed as high level vulnerabilities identified by security scan in Kubernetes platform.
can you suggest any version of logstash which will resolve all these vulnerabilities?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.