search

elasticio / sailor-jvm

The official elastic.io library for bootstrapping and executing for connectors built on JVM.
0 stars 2 forks source link

Bump com.fasterxml.jackson.core to the latest stable version #59

Closed A3a3e1 closed 2 years ago

A3a3e1 commented 3 years ago

The currently used 2.9.5 version contains 44 CRITICAL vulnerabilities (OWASP dependency check tool) image

Sample from JDBC component using Sailor 3.3.1:

image

Can be solved locally in the component with manual:

compile 'com.fasterxml.jackson.core:jackson-core:2.10.1'
compile 'com.fasterxml.jackson.core:jackson-annotations:2.10.1'
compile 'com.fasterxml.jackson.core:jackson-databind:2.10.1'
A3a3e1 commented 2 years ago

Done