Skip to content

Commit

Permalink
Bump version of Jackson libraries to 2.15.2
Browse files Browse the repository at this point in the history
Previous versions of Jackson libraries included an old version of
snakeyaml which was susceptible to CVE-2022-1471.
  • Loading branch information
avelanarius committed Jul 11, 2023
1 parent cd6b641 commit 9aa665f
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions driver-core/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -167,10 +167,12 @@
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
<version>2.15.2</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformat-yaml</artifactId>
<version>2.15.2</version>
</dependency>
<!-- https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk15on -->
<dependency>
Expand Down

0 comments on commit 9aa665f

Please sign in to comment.