Skip to content

Commit 816abb5

Browse files
committed
USPR-13777: bump tools.jackson.core resolutionStrategy pin to 3.1.5 (GHSA-5gvw-p9qm-jgwh)
1 parent 850a009 commit 816abb5

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

build.gradle

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -26,11 +26,11 @@ subprojects {
2626
configurations.configureEach {
2727
resolutionStrategy.eachDependency {
2828
if (requested.group == 'tools.jackson.core'
29-
&& requested.version != null && requested.version < '3.1.4') {
30-
useVersion('3.1.4')
29+
&& requested.version != null && requested.version < '3.1.5') {
30+
useVersion('3.1.5')
3131
because('GHSA-2m67-wjpj-xhg9: Jackson Core 3.0.0-3.1.0 maxDocumentLength bypass; ' +
3232
'GHSA-j3rv-43j4-c7qm / GHSA-rmj7-2vxq-3g9f / GHSA-hgj6-7826-r7m5 / GHSA-5jmj-h7xm-6q6v / ' +
33-
'GHSA-rcqc-6cw3-h962 / GHSA-9fxm-vc8v-hj55 / GHSA-5hh8-q8hv-fr38: jackson-databind 3.x deserialization vulnerabilities')
33+
'GHSA-rcqc-6cw3-h962 / GHSA-9fxm-vc8v-hj55 / GHSA-5hh8-q8hv-fr38 / GHSA-5gvw-p9qm-jgwh: jackson-databind 3.x deserialization vulnerabilities')
3434
}
3535
if (requested.group == 'com.fasterxml.jackson.core' && requested.name == 'jackson-databind'
3636
&& requested.version != null && requested.version < '2.21.5') {

0 commit comments

Comments
 (0)