Skip to content

Commit

Permalink
Merge pull request #1937 from ivassile/JBEAP-25182
Browse files Browse the repository at this point in the history
[ELY-2493] Upgrade jackson-databind to 2.13.4 to address CVE-2022-42004
  • Loading branch information
Skyllarr authored Aug 10, 2023
2 parents 1821170 + fbe3426 commit ef738f9
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,8 @@

<properties>
<jdk.min.version>11</jdk.min.version>
<version.com.fasterxml.jackson>2.11.3</version.com.fasterxml.jackson>
<version.com.fasterxml.jackson>2.13.4</version.com.fasterxml.jackson>
<version.com.fasterxml.jackson.databind>${version.com.fasterxml.jackson}.2</version.com.fasterxml.jackson.databind>
<version.commons-cli>1.4</version.commons-cli>
<version.io.smallrye.jwt>3.0.0</version.io.smallrye.jwt>
<version.jakarta.enterprise>2.0.2</version.jakarta.enterprise>
Expand Down Expand Up @@ -1009,7 +1010,7 @@
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
<version>${version.com.fasterxml.jackson}</version>
<version>${version.com.fasterxml.jackson.databind}</version>
</dependency>
<dependency>
<groupId>org.bitbucket.b_c</groupId>
Expand Down

0 comments on commit ef738f9

Please sign in to comment.