tree 90da589ba2963ae15fe97c0fd5496ee77e818306
parent 05d5dd9289c03c62bab8f5a8caf80804382e4829
author zachjsh <zachjsh@gmail.com> 1626145086 -0400
committer GitHub <noreply@github.com> 1626145086 -0400
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsBcBAABCAAQBQJg7QE+CRBK7hj4Ov3rIwAAFtIIAGHwUHto91QZk63ePvNFOEEG
 lkOuYAwWJqyjwlxuIWOWTdDI/vl0wrl14dJrUSyFlB1KUKOUPZ/kYi7IlGtY0/zM
 6r8cs0eZcp/fCiQQri6S/qxJWhXdWMaAO92V6un5QZBq7jU3GTYYTBiVcZJYKR78
 UUEoJd5RDLghroaJV7ruCLmTYcdABqX+rk6SnqEafHINVNuwU/14vOgSwK8t1vy9
 pxkuEE7AvQi/zN+8d8BunCClmTuweBOZbVtE6vuBVZaIRI9JsQYz1Kj9g8+ALub6
 wLlyX3wthJKt9DmAm8gZz+3+3yGOyaBOZiCcGlrSelbZfHrUKz725OQaayqdSNw=
 =EOTC
 -----END PGP SIGNATURE-----
 

Suppress CVE-2021-27568 from json-smart 2.3 dependency (#11438)

Dependency on hadoop 2.8.5 is preventing us form updating this dependency to a later version. We don't believe that this is a major concern since Druid eats uncaught exceptions, and only displays them in logs. This issue also should only affect ingestion jobs, which can only be run by admin type users.