From f303fc72a4c83358ba58d63e2064af360393fe7a Mon Sep 17 00:00:00 2001 From: Daniel Basten Date: Wed, 9 May 2018 13:37:31 +0200 Subject: [PATCH] Update jackson dependencies to 2.9.5 jackson.core:jackson-databind:2.3.3 2.3.3 is affected by the following CVEs: - CVE-2017-15095 - CVE-2017-17485 - CVE-2017-7525 - CVE-2018-5968 - CVE-2018-7489 --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index 70b5888..b2b6045 100644 --- a/build.gradle +++ b/build.gradle @@ -41,7 +41,7 @@ ext { cglibVersion = "3.1" - jacksonVersion = "2.3.3" + jacksonVersion = "2.9.5" junitVersion = "4.11" mockitoVersion = "1.9.5"