File tree 3 files changed +8
-3
lines changed
swagger-parser-v2-converter
3 files changed +8
-3
lines changed Original file line number Diff line number Diff line change 57
57
<dependency >
58
58
<groupId >com.fasterxml.jackson.core</groupId >
59
59
<artifactId >jackson-databind</artifactId >
60
- <version >${jackson-version} </version >
60
+ <version >${jackson-databind- version} </version >
61
61
<scope >provided</scope >
62
62
</dependency >
63
63
<dependency >
Original file line number Diff line number Diff line change 47
47
<dependency >
48
48
<groupId >com.fasterxml.jackson.core</groupId >
49
49
<artifactId >jackson-databind</artifactId >
50
- <version >${jackson-version} </version >
50
+ <version >${jackson-databind- version} </version >
51
51
</dependency >
52
52
<dependency >
53
53
<groupId >com.fasterxml.jackson.dataformat</groupId >
Original file line number Diff line number Diff line change 325
325
<dependency >
326
326
<groupId >com.fasterxml.jackson.core</groupId >
327
327
<artifactId >jackson-databind</artifactId >
328
- <version >${jackson-version} </version >
328
+ <version >${jackson-databind- version} </version >
329
329
</dependency >
330
330
<dependency >
331
331
<groupId >com.fasterxml.jackson.core</groupId >
406
406
<surefire-version >2.22.2</surefire-version >
407
407
<commons-lang-version >3.2.1</commons-lang-version >
408
408
<jackson-version >2.13.2</jackson-version >
409
+ <!--
410
+ 2.13.2 is still affected by CVE-2020-36518.
411
+ This version pin for jackson-databind can be removed when bumping jackson to 2.14
412
+ -->
413
+ <jackson-databind-version >2.13.2.2</jackson-databind-version >
409
414
<project .build.sourceEncoding>UTF-8</project .build.sourceEncoding>
410
415
<sonatypeOssDistMgmtSnapshotsUrl >https://oss.sonatype.org/content/repositories/snapshots/</sonatypeOssDistMgmtSnapshotsUrl >
411
416
</properties >
You can’t perform that action at this time.
0 commit comments