Skip to content

Commit 7905b2b

Browse files
authored
Merge pull request #155 from copilot-community-sdk/fix/dependabot-jackson-core-dos
Upgrade Jackson to 2.21.1 to fix async parser DoS vulnerability (GHSA-72hv-8253-57qq)
2 parents 6cfbe4f + 050e8e4 commit 7905b2b

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

pom.xml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -49,17 +49,17 @@
4949
<dependency>
5050
<groupId>com.fasterxml.jackson.core</groupId>
5151
<artifactId>jackson-databind</artifactId>
52-
<version>2.20.1</version>
52+
<version>2.21.1</version>
5353
</dependency>
5454
<dependency>
5555
<groupId>com.fasterxml.jackson.core</groupId>
5656
<artifactId>jackson-annotations</artifactId>
57-
<version>2.20</version>
57+
<version>2.21</version>
5858
</dependency>
5959
<dependency>
6060
<groupId>com.fasterxml.jackson.datatype</groupId>
6161
<artifactId>jackson-datatype-jsr310</artifactId>
62-
<version>2.20.1</version>
62+
<version>2.21.1</version>
6363
</dependency>
6464

6565
<!-- SpotBugs annotations for suppressing warnings -->

0 commit comments

Comments
 (0)