[close #567] upgrade jackson-databind to 2.13.2.2 to fix CVE-2020-36518 (#584) (#605)

Signed-off-by: iosmanthus <myosmanthustree@gmail.com>
This commit is contained in:
iosmanthus 2022-05-30 15:01:38 +08:00 committed by GitHub
parent e72ba8b682
commit fed0826e81
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions

View File

@ -65,8 +65,8 @@
<grpc.version>1.38.0</grpc.version> <grpc.version>1.38.0</grpc.version>
<gson.version>2.8.9</gson.version> <gson.version>2.8.9</gson.version>
<powermock.version>1.6.6</powermock.version> <powermock.version>1.6.6</powermock.version>
<jackson.version>2.10.5</jackson.version> <jackson-annotations.version>2.13.2</jackson-annotations.version>
<jackson.databind.version>2.10.5.1</jackson.databind.version> <jackson.version>2.13.2.2</jackson.version>
<trove4j.version>3.0.1</trove4j.version> <trove4j.version>3.0.1</trove4j.version>
<jetcd.version>0.4.1</jetcd.version> <jetcd.version>0.4.1</jetcd.version>
<joda-time.version>2.9.9</joda-time.version> <joda-time.version>2.9.9</joda-time.version>
@ -179,12 +179,12 @@
<dependency> <dependency>
<groupId>com.fasterxml.jackson.core</groupId> <groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-annotations</artifactId> <artifactId>jackson-annotations</artifactId>
<version>${jackson.version}</version> <version>${jackson-annotations.version}</version>
</dependency> </dependency>
<dependency> <dependency>
<groupId>com.fasterxml.jackson.core</groupId> <groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId> <artifactId>jackson-databind</artifactId>
<version>${jackson.databind.version}</version> <version>${jackson.version}</version>
</dependency> </dependency>
<dependency> <dependency>
<groupId>io.etcd</groupId> <groupId>io.etcd</groupId>