americanexpress / nodes

A GraphQL JVM Client - Java, Kotlin, Scala, etc.
Apache License 2.0
307 stars 70 forks source link

Jackson dependency update. [Feature Request] #76

Open daveyleo opened 5 years ago

daveyleo commented 5 years ago

Currently dependent on Jackson 2.9.6 which has some vulnerabilities (e.g. https://nvd.nist.gov/vuln/detail/CVE-2018-19362)

Please consider updating to 2.9.8 as these vulnerabilities have been resolved in this version.