# Security scans report version of Jackson-dataformat-cobr 2.10.4
**URL:** https://discuss.elastic.co/t/security-scans-report-version-of-jackson-dataformat-cobr-2-10-4/264439
**Category:** Elasticsearch
**Created:** [February 16, 2021, 1:37pm UTC](https://discuss.elastic.co/t/security-scans-report-version-of-jackson-dataformat-cobr-2-10-4/264439 "2021-02-16T13:37:50Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@avifmontier](https://discuss.elastic.co/u/avifmontier)
#### Post date: [February 16, 2021, 1:37pm UTC](https://discuss.elastic.co/t/security-scans-report-version-of-jackson-dataformat-cobr-2-10-4/264439/1 "2021-02-16T13:37:50Z")
Jackson-dataformat-cobr 2.10.4 used by elasticsearch-x-content 7.9.x seems to have security issues:
CVE-2020-28491
CVE-2020-25649
Those issue seems to be fixed in later version of Jackson.
Is there an intention to upgrade jackson ? which version and when ?
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [February 16, 2021, 9:46pm UTC](https://discuss.elastic.co/t/security-scans-report-version-of-jackson-dataformat-cobr-2-10-4/264439/2 "2021-02-16T21:46:02Z")
Welcome to our community! 😃
The best way to get some assistance with this is to check out [Free and Open Search: The Creators of Elasticsearch, ELK & Kibana | Elastic](https://www.elastic.co/community/security)
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 16, 2021, 9:46pm UTC](https://discuss.elastic.co/t/security-scans-report-version-of-jackson-dataformat-cobr-2-10-4/264439/3 "2021-03-16T21:46:40Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.