search

openrewrite / rewrite-gradle-plugin

OpenRewrite's Gradle plugin.
Apache License 2.0
65 stars 40 forks source link

Upgrade `jackson-kotlin-module` to `2.14.0` when released #106

Closed tkvangorder closed 1 year ago

tkvangorder commented 2 years ago

There is a medium priority vulnerability for Kotlin 1.5.x., this dependency is being brought in transitively through the jackson-kotlin-module:2.13.2

We cannot address this issue until there is a new release of jackson.

https://mvnrepository.com/artifact/com.fasterxml.jackson.module/jackson-module-kotlin

shanman190 commented 1 year ago

Given our use of latest.release this is completed. The current plugin is using 2.14.2 at this time.