bump jackson for security

Kong · Nov 6, 2019 · 33cb416 · 33cb416
1 parent 44cc5cb
commit 33cb416
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 5 deletions.
diff --git a/object-mapper-jackson/pom.xml b/object-mapper-jackson/pom.xml
@@ -27,7 +27,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>${jackson.version}</version>
+            <version>${jackson.databind.version}</version>
         </dependency>
     </dependencies>
 

diff --git a/pom.xml b/pom.xml
@@ -28,6 +28,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
         <jackson.version>2.9.10</jackson.version>
+        <jackson.databind.version>2.9.10.1</jackson.databind.version>
         <main.dir>${project.basedir}</main.dir>
     </properties>
 
@@ -280,9 +281,9 @@
                             <rules>
                                 <banVulnerable implementation="org.sonatype.ossindex.maven.enforcer.BanVulnerableDependencies">
                                     <excludeVulnerabilityIds>
-                                        <exclude>f4f0c103-c9d9-4308-bd8f-489f2a632680</exclude>
-                                        <exclude>07632245-fcef-4eb3-82b6-aadbbfd2b33e</exclude>
-                                        <exclude>ea932c13-011a-4c74-a092-48cd1c49adb4</exclude>
+<!--                                        <exclude>f4f0c103-c9d9-4308-bd8f-489f2a632680</exclude>-->
+<!--                                        <exclude>07632245-fcef-4eb3-82b6-aadbbfd2b33e</exclude>-->
+<!--                                        <exclude>ea932c13-011a-4c74-a092-48cd1c49adb4</exclude>-->
                                     </excludeVulnerabilityIds>
                                 </banVulnerable>
                             </rules>

diff --git a/unirest/pom.xml b/unirest/pom.xml
@@ -96,7 +96,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>${jackson.version}</version>
+            <version>${jackson.databind.version}</version>
             <scope>test</scope>
         </dependency>
         <dependency>