flipkart-incubator / zjsonpatch

This is an implementation of RFC 6902 JSON Patch written in Java
Apache License 2.0
523 stars 148 forks source link

Bump jackson.version from 2.14.0 to 2.14.2 #173

Open acarioni opened 1 year ago

acarioni commented 1 year ago

Jackson.core 2.14.0 is vulnerable to CWE-400: Uncontrolled Resource Consumption. There is also a pending pull request to fix it. Can you release a new version of zjsonpatch with the fix, please?