Skip to content

Commit 15eb6ad

Browse files
committed
apiclient: Bump Jackson version to 2.10.4
Jackson 2.9.x has various vulnerabilities that are fixed in 2.10 series: FasterXML/jackson-databind#2700 (comment) Let's update to the latest version of Jackson. This is a similar fix to Github's Dependabot proposal, except we bump the version number across all Jackson components: #116
1 parent 5820992 commit 15eb6ad

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

scylla-apiclient/pom.xml

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@
1212
<properties>
1313
<maven.compiler.target>1.8</maven.compiler.target>
1414
<maven.compiler.source>1.8</maven.compiler.source>
15+
<jackson.version>2.10.4</jackson.version>
1516
</properties>
1617

1718
<dependencies>
@@ -63,17 +64,17 @@
6364
<dependency>
6465
<groupId>com.fasterxml.jackson.core</groupId>
6566
<artifactId>jackson-annotations</artifactId>
66-
<version>2.9.9</version>
67+
<version>${jackson.version}</version>
6768
</dependency>
6869
<dependency>
6970
<groupId>com.fasterxml.jackson.core</groupId>
7071
<artifactId>jackson-databind</artifactId>
71-
<version>2.9.10.4</version>
72+
<version>${jackson.version}</version>
7273
</dependency>
7374
<dependency>
7475
<groupId>com.fasterxml.jackson.jaxrs</groupId>
7576
<artifactId>jackson-jaxrs-json-provider</artifactId>
76-
<version>2.9.9</version>
77+
<version>${jackson.version}</version>
7778
</dependency>
7879
</dependencies>
7980

0 commit comments

Comments
 (0)