Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update jackson-databind to address CVE #225

Merged
merged 1 commit into from
Sep 25, 2019
Merged

Update jackson-databind to address CVE #225

merged 1 commit into from
Sep 25, 2019

Conversation

jimmyjames
Copy link
Contributor

Changes

Update jackson-databind dependency to 2.10.0.pr3 to address CVE.

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14540

Checklist

@jimmyjames jimmyjames requested a review from a team September 24, 2019 19:51
@lbalmaceda lbalmaceda merged commit 83fd0f1 into auth0:master Sep 25, 2019
@lbalmaceda lbalmaceda added this to the v1-Next milestone Sep 25, 2019
@jimmyjames jimmyjames modified the milestones: v1-Next, 1.14.3 Sep 25, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@joshcanhelp joshcanhelp joshcanhelp approved these changes

@lbalmaceda lbalmaceda lbalmaceda approved these changes

Assignees
No one assigned
Labels
CH: Security tiny
Projects
None yet
Milestone
1.14.3
Development

Successfully merging this pull request may close these issues.
3 participants
@jimmyjames @joshcanhelp @lbalmaceda