From 12158ea59dafb84b4f63086a73cb2ed2017fa757 Mon Sep 17 00:00:00 2001
From: Benoit Tellier <btellier@linagora.com>
Date: Mon, 20 Sep 2021 14:43:35 +0700
Subject: [PATCH] UPGRADE jackson-dataformat-cbor 2.10.4 -> 2.11.4 (ES 7
 driver)

---
 backends-common/elasticsearch-v7/pom.xml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/backends-common/elasticsearch-v7/pom.xml b/backends-common/elasticsearch-v7/pom.xml
index 7dd9d1889dd..c3c774e6785 100644
--- a/backends-common/elasticsearch-v7/pom.xml
+++ b/backends-common/elasticsearch-v7/pom.xml
@@ -46,6 +46,14 @@
             <artifactId>testing-base</artifactId>
             <scope>test</scope>
         </dependency>
+
+        <!-- Prevents https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28491 -->
+        <dependency>
+            <groupId>com.fasterxml.jackson.dataformat</groupId>
+            <artifactId>jackson-dataformat-cbor</artifactId>
+            <version>2.11.4</version>
+        </dependency>
+
         <dependency>
             <groupId>com.github.fge</groupId>
             <artifactId>throwing-lambdas</artifactId>