From c8aa3ab7f93cab845b529b103767050b4c27f7ca Mon Sep 17 00:00:00 2001 From: Nitin Prabhu Date: Wed, 7 Aug 2019 10:55:00 +0100 Subject: [PATCH] Bumped Jackson databind version to resolve CVE-2019-14379 (#511) * Bumped Jackson databank version to resolve CVE-2019-14379 * Fix NPE FasterXML/jackson-databind#2395 --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index 7d0e671a4..7f94196d4 100644 --- a/build.gradle +++ b/build.gradle @@ -205,7 +205,7 @@ dependencyManagement { entry 'mockito-core' } // CVE-2019-12814 - dependencySet(group: 'com.fasterxml.jackson.core', version: '2.9.9.1') { + dependencySet(group: 'com.fasterxml.jackson.core', version: '2.9.9.3') { entry 'jackson-databind' } }