CNF Exception for jackson 2.10.0

metosin / jsonista

Clojure library for fast JSON encoding and decoding.

https://cljdoc.org/d/metosin/jsonista

Eclipse Public License 2.0

422 stars 30 forks source link

CNF Exception for jackson 2.10.0 #24

Closed RokLenarcic closed 5 years ago

RokLenarcic commented 5 years ago

If you upgrade [com.fasterxml.jackson.core/jackson-databind "2.9.9"] to 2.10.0 you will get this message when compiling project:

Syntax error compiling new at (jsonista/core.clj:79:38).
Syntax error (ClassNotFoundException) compiling new at (jsonista/core.clj:79:38).
com.fasterxml.jackson.core.exc.InputCoercionException

The reason I bumped the version was 6 CVEs for version 2.9.9.

miikka commented 5 years ago

@RokLenarcic, did you also upgrade jackson-core to 2.10.0?

RokLenarcic commented 5 years ago

Not explicitly, no. I assumed that a version of databind also pulls the same version of core as dependency, but it looks like someone specifically requires core at 2.9.6. Specifying core version fixes this. Thanks.