fix(sec): upgrade com.fasterxml.jackson.core:jackson-databind to 2.14.0-rc1

zhoutaoo / SpringCloud

基于SpringCloud2.1的微服务开发脚手架，整合了spring-security-oauth2、nacos、feign、sentinel、springcloud-gateway等。服务治理方面引入elasticsearch、skywalking、springboot-admin、zipkin等，让项目开发快速进入业务开发，而不需过多时间花费在架构搭建上。持续更新中

Apache License 2.0

8.68k stars 3.87k forks source link

fix(sec): upgrade com.fasterxml.jackson.core:jackson-databind to 2.14.0-rc1 #232

Open pen4 opened 1 year ago

pen4 commented 1 year ago

What happened？

There are 1 security vulnerabilities found in com.fasterxml.jackson.core:jackson-databind 2.12.6.1

CVE-2022-42004

What did I do？

Upgrade com.fasterxml.jackson.core:jackson-databind from 2.12.6.1 to 2.14.0-rc1 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS

Signed-off-by:pen4948453219@qq.com