# What is the mybatis version in latest version of flowable 6.7.2 **URL:** \ **Category:** Flowable Engine\ **Created:** [October 3, 2022, 8:49pm UTC](https://forum.flowable.org/t/what-is-the-mybatis-version-in-latest-version-of-flowable-6-7-2/9773 "2022-10-03T20:49:51Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![pt35468](https://avatars.discourse-cdn.com/v4/letter/p/43a26b/32.png) [@pt35468](https://forum.flowable.org/u/pt35468)\ **Post date:** [October 3, 2022, 8:49pm UTC](https://forum.flowable.org/t/what-is-the-mybatis-version-in-latest-version-of-flowable-6-7-2/9773/1 "2022-10-03T20:49:51Z")
We currently use version 6.5 and the mybatis dependency version within flowable-spring-boot-starter-rest is 3.5.3. Our contrast vulnerability third party checker is stating this version has a high vulnerability and we should use 3.5.8 HIGH CVSS 3.1 Score 8.1 MyBatis before 3.5.6 mishandles deserialization of object streams. What version is 6.7.2 using and if still at 3.5.3 are there any plans to upgrade ? ---
**Author:** ![maudrid](https://avatars.discourse-cdn.com/v4/letter/m/e56c9b/32.png) [@maudrid](https://forum.flowable.org/u/maudrid)\ **Post date:** [October 10, 2022, 11:36am UTC](https://forum.flowable.org/t/what-is-the-mybatis-version-in-latest-version-of-flowable-6-7-2/9773/2 "2022-10-10T11:36:22Z")
You may be able to change (or add to) your pom.xml the newer version without having to upgrade Flowable itself. ---
**Author:** ![joram](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/joram/32/26_2.png) [@joram](https://forum.flowable.org/u/joram)\ **Post date:** [October 12, 2022, 10:35am UTC](https://forum.flowable.org/t/what-is-the-mybatis-version-in-latest-version-of-flowable-6-7-2/9773/3 "2022-10-12T10:35:58Z")
Flowable 6.7.2 uses 3.5.7, you can look this up here: [flowable-engine/pom.xml at flowable-6.7.2 · flowable/flowable-engine · GitHub](https://github.com/flowable/flowable-engine/blob/flowable-6.7.2/pom.xml#L828) The current main branch uses 3.5.10.