search

spring-cloud / spring-cloud-connectors

Library to let cloud applications connect to services
Apache License 2.0
185 stars 161 forks source link

Update jackson version to 2.9.9 for master #292

Closed azizsonawalla closed 5 years ago

azizsonawalla commented 5 years ago

Resolves gh-290 for master Updated com.fasterxml.jackson.core:jackson-databind version to 2.9.9 to overcome CVEs

azizsonawalla commented 5 years ago

@scottfrederick please review when you have an opportunity. Thanks!

scottfrederick commented 5 years ago

@azizsonawalla Be advised that this library has entered maintenance-only mode (see https://spring.io/blog/2019/02/15/introducing-java-cfenv-a-new-library-for-accessing-cloud-foundry-services#what-rsquo-s-next). We'll keep making this type of security-related updates, but you should move to Java CFEnv when possible.

azizsonawalla commented 5 years ago

@azizsonawalla Be advised that this library has entered maintenance-only mode (see https://spring.io/blog/2019/02/15/introducing-java-cfenv-a-new-library-for-accessing-cloud-foundry-services#what-rsquo-s-next). We'll keep making this type of security-related updates, but you should move to Java CFEnv when possible.

Ah got it! Thanks for the information!