Bump jackson-databind from 2.13.2 to 2.13.2.1 (#2569)

yahoo · Mar 31, 2022 · 14ae1c4 · 14ae1c4
1 parent 5e67e54
commit 14ae1c4
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 7 deletions.
diff --git a/pom.xml b/pom.xml
@@ -89,6 +89,7 @@
         <version.jetty>9.4.45.v20220203</version.jetty>
         <version.restassured>4.4.0</version.restassured>
         <version.jackson>2.13.2</version.jackson>
+        <version.jackson.databind>2.13.2.1</version.jackson.databind>
         <version.jersey>2.35</version.jersey>
         <version.junit>5.8.2</version.junit>
         <version.junit.platform>1.8.2</version.junit.platform>
@@ -256,7 +257,7 @@
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-databind</artifactId>
-                <version>${version.jackson}</version>
+                <version>${version.jackson.databind}</version>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson.dataformat</groupId>

diff --git a/suppressions.xml b/suppressions.xml
@@ -7,10 +7,4 @@
     <suppress until="2022-12-31">
         <cve>CVE-2020-0822</cve>
     </suppress>
-
-    <!-- Jackson Databind - Looks like error in matching algorithm -->
-    <suppress until="2022-12-31">
-        <cve>CVE-2020-36518</cve>
-    </suppress>
-
 </suppressions>