From 7c3b40397d5b5922f7ac03d1153163011b988610 Mon Sep 17 00:00:00 2001 From: Ryan Lewis Date: Thu, 10 Nov 2022 08:01:34 +0000 Subject: Introduce jackson-databind constraint for 2.12.7.1 (#2733) Fixes CVE-2022-42003 --- gradle.properties | 2 ++ 1 file changed, 2 insertions(+) (limited to 'gradle.properties') diff --git a/gradle.properties b/gradle.properties index 5483dc4b..cd86cf40 100644 --- a/gradle.properties +++ b/gradle.properties @@ -11,6 +11,8 @@ idea_version=213.6777.52 language_version=1.4 # jackson 2.13.X does not support kotlin language version 1.4, check before updating jackson_version=2.12.7 +# fixes CVE-2022-42003 +jackson_databind_version=2.12.7.1 freemarker_version=2.3.31 # Code style kotlin.code.style=official -- cgit