Skip to content

Commit 140aa4d

Browse files
rix0rrrElad Ben-Israel
authored andcommitted
fix: Bump version of Jackson because of CVEs (#362)
Versions low than 2.9.8 have a number of CVEs filed against it.
1 parent b2b2c89 commit 140aa4d

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

packages/jsii-java-runtime/pom.xml.t.js

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -52,14 +52,14 @@ process.stdout.write(`<?xml version="1.0" encoding="UTF-8"?>
5252
<dependency>
5353
<groupId>com.fasterxml.jackson.core</groupId>
5454
<artifactId>jackson-core</artifactId>
55-
<version>2.9.5</version>
55+
<version>[2.9.8,)</version>
5656
</dependency>
5757
5858
<!-- https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind -->
5959
<dependency>
6060
<groupId>com.fasterxml.jackson.core</groupId>
6161
<artifactId>jackson-databind</artifactId>
62-
<version>2.9.5</version>
62+
<version>[2.9.8,)</version>
6363
</dependency>
6464
6565
<!-- https://mvnrepository.com/artifact/com.google.guava/guava-io -->

0 commit comments

Comments
 (0)