Netflix / governator

Governator is a library of extensions and utilities that enhance Google Guice to provide: classpath scanning and automatic binding, lifecycle management, configuration to field mapping, field validation and parallelized object warmup.
Apache License 2.0
825 stars 180 forks source link

Update jackson-databind dependency to 2.9.8 #388

Open jacinpoz opened 5 years ago

jacinpoz commented 5 years ago

jackson-databind 2.4.3 contains vulnerabilities and any projects depending on com.netflix.governator:governator will show them when running dependency check reports. Upgrading jackson-databind 2.9.8 does not seem to cause any issues and fixes the problem.

jackson-databind-2 4 3-vulnerabilities jackson-databind-2 4 3-vulnerabilities-cw-184 jackson-databind-2 4 3-vulnerabilities-cwe-502