Skip to content

Commit

Permalink
Security: Bump jackson-databind to 2.13.2.2 (#566)
Browse files Browse the repository at this point in the history
* Security: Bump `jackson-databind` to 2.13.2.1

This PR bumps the `jackson-databind` dependency to 2.13.2.1 to address [CVE-2020-36518](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36518) in that library

* Bump to 2.13.2.2
  • Loading branch information
evansims committed Mar 30, 2022
1 parent e62dd3a commit dd22f32
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion lib/build.gradle
Expand Up @@ -47,7 +47,7 @@ javadoc {
}

dependencies {
implementation 'com.fasterxml.jackson.core:jackson-databind:2.13.2'
implementation 'com.fasterxml.jackson.core:jackson-databind:2.13.2.2'
testImplementation 'org.bouncycastle:bcprov-jdk15on:1.60'
testImplementation 'junit:junit:4.12'
testImplementation 'net.jodah:concurrentunit:0.4.3'
Expand Down

0 comments on commit dd22f32

Please sign in to comment.