code4craft / webmagic

A scalable web crawler framework for Java.
http://webmagic.io/
Apache License 2.0
11.37k stars 4.18k forks source link

fix(sec): upgrade com.fasterxml.jackson.core:jackson-databind to #1149

Closed Ch3n4y closed 6 months ago

Ch3n4y commented 6 months ago

What happened?

There are 1 security vulnerabilities found in com.fasterxml.jackson.core:jackson-databind 2.15.2

What did I do?

Upgrade com.fasterxml.jackson.core:jackson-databind from 2.15.2 to for vulnerability fix

What did you expect to happen?

Ideally, no insecure libs should be used.

How can we automate the detection of these types of issues?

By using the GitHub Actions configurations provided by murphysec, we can conduct automatic code security checks in our CI pipeline.

The specification of the pull request

PR Specification from OSCS