Merge pull request #347 from danbrodsky/update_jackson_databind_to_2.9.9.1

jimmyjames · web-flow · commit 00deb41164d8 · 2019-08-15T11:06:01.000-05:00
Fix: updated jackson-databind to 2.9.9.3 to block CVE
diff --git a/lib/build.gradle b/lib/build.gradle
@@ -34,7 +34,7 @@ compileJava {
 }
 
 dependencies {
-    implementation 'com.fasterxml.jackson.core:jackson-databind:2.9.9'
+    implementation 'com.fasterxml.jackson.core:jackson-databind:2.9.9.3'
     implementation 'commons-codec:commons-codec:1.12'
     testImplementation 'org.bouncycastle:bcprov-jdk15on:1.60'
     testImplementation 'junit:junit:4.12'

Original file line number	Diff line number	Diff line change
`@@ -34,7 +34,7 @@ compileJava {`
`34`	`34`	`}`
`35`	`35`
`36`	`36`	`dependencies {`
`37`		`- implementation 'com.fasterxml.jackson.core:jackson-databind:2.9.9'`
	`37`	`+ implementation 'com.fasterxml.jackson.core:jackson-databind:2.9.9.3'`
`38`	`38`	`implementation 'commons-codec:commons-codec:1.12'`
`39`	`39`	`testImplementation 'org.bouncycastle:bcprov-jdk15on:1.60'`
`40`	`40`	`testImplementation 'junit:junit:4.12'`