Bump up jackson-bom to 2.17.0 - Githubissues

allure-framework / allure-java

Allure integrations for Java test frameworks

Apache License 2.0

340 stars 218 forks source link

Bump up jackson-bom to 2.17.0 #1038

Open fjgarciao opened 2 months ago

fjgarciao commented 2 months ago

Context

Related to: https://github.com/allure-framework/allure-java/issues/1037

Current jackson version embedded (2.14.1) in allure-java-commons has several vulnerabilities:

https://github.com/FasterXML/jackson-core/pull/827 (high)
https://nvd.nist.gov/vuln/detail/CVE-2023-35116 (medium)

Bump it up to the latest version 2.17.0

Checklist

[x] Sign Allure CLA
[ ] Provide unit tests