Browse Source

AMBARI-25785 : upgrade jackson-databind to resolve CVEs (#3605)

Signed-off-by: Brahma Reddy Battula <brahma@apache.org>
Ananya Singh 3 years ago
parent
commit
b24cd6962d
1 changed files with 2 additions and 2 deletions
  1. 2 2
      ambari-project/pom.xml

+ 2 - 2
ambari-project/pom.xml

@@ -41,8 +41,8 @@
     <guice.version>4.1.0</guice.version>
     <spring.version>5.3.22</spring.version>
     <spring.security.version>5.7.2</spring.security.version>
-    <fasterxml.jackson.version>2.10.0</fasterxml.jackson.version>
-    <fasterxml.jackson.databind.version>2.10.0</fasterxml.jackson.databind.version>
+    <fasterxml.jackson.version>2.12.7</fasterxml.jackson.version>
+    <fasterxml.jackson.databind.version>2.12.7.1</fasterxml.jackson.databind.version>
     <postgres.version>42.2.2</postgres.version>
     <testContainers.version>1.10.2</testContainers.version>
     <forkCount>4</forkCount>