fix(sec): upgrade jackson-databind to 2.13.2.1

eirslett / frontend-maven-plugin

"Maven-node-grunt-gulp-npm-node-plugin to end all maven-node-grunt-gulp-npm-plugins." A Maven plugin that downloads/installs Node and NPM locally, runs NPM install, Grunt, Gulp and/or Karma.

Apache License 2.0

4.21k stars 867 forks source link

fix(sec): upgrade jackson-databind to 2.13.2.1 #1052

Closed Huoxi-any closed 1 year ago

Huoxi-any commented 1 year ago

Upgrade jackson-databind from 2.13.0 to 2.13.2.1 for vulnerability fix:

CVE-2020-36518
MPS-2022-12500

eirslett commented 1 year ago

Thanks! Also fixed in #1055