joel/largeRCRF-Java
1
0
Fork 0
Code Issues 3 Pull requests Releases Wiki Activity

Upgrade Jackson in executable project

Browse source 
Jackson has some security vulnerability that can only be exploited in a server environment;
not relevant here whatsoever, but might as well update.
This commit is contained in:
Joel Therrien 2019-07-22 11:36:29 -07:00
parent d7cdc9f6e7
commit aa1f544ea2
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
executable/pom.xml
View file

@ -38,7 +38,8 @@
<dependency> <dependency>
<groupId>com.fasterxml.jackson.core</groupId> <groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId> <artifactId>jackson-databind</artifactId>
<version>${jackson.version}</version> <!--<version>${jackson.version}</version> 2.9.9.1 fixes some vulnerability; other Jackson dependencies are still on 2.9.9-->
<version>2.9.9.1</version>
</dependency> </dependency>
<dependency> <dependency>