From 5c87837be23cfc4a224bfbce50cacac9949979ac Mon Sep 17 00:00:00 2001 From: Ben Cox <1038350+ind1go@users.noreply.github.com> Date: Sat, 3 Aug 2019 07:40:23 -0400 Subject: [PATCH] Update dependency to avoid jackson-databind CVEs Avoids CVE-2019-14379 FasterXML/jackson-databind#2387 Avoids CVE-2019-14439 FasterXML/jackson-databind#2389 Signed-off-by: Ben Cox <1038350+ind1go@users.noreply.github.com> --- cics-bundle-maven-plugin/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cics-bundle-maven-plugin/pom.xml b/cics-bundle-maven-plugin/pom.xml index a6026123..7fd09c00 100644 --- a/cics-bundle-maven-plugin/pom.xml +++ b/cics-bundle-maven-plugin/pom.xml @@ -63,7 +63,7 @@ com.fasterxml.jackson.core jackson-databind - 2.9.9.1 + 2.9.9.2