haiku / haikudepotserver

Haiku Depot Server
Other
17 stars 10 forks source link

Update jackson-databind due to CVE-2018-19360 (and others) #170

Closed kallisti5 closed 5 years ago

kallisti5 commented 5 years ago

7 com.fasterxml.jackson.core:jackson-databind vulnerabilities found in haikudepotserver-parent/pom.xml on Jan 4

Remediation Upgrade com.fasterxml.jackson.core:jackson-databind to version 2.9.8 or later. For example:

com.fasterxml.jackson.core jackson-databind [2.9.8,)