From a97e3ae45af2b76d3216e9d2d930769569d9b0d6 Mon Sep 17 00:00:00 2001 From: Thomas Zurkan Date: Thu, 31 Jan 2019 14:37:40 -0800 Subject: [PATCH] upgrade jackson for jackson-databind is vulnerable to Deserialisation --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index 9f04aa943..c95091dad 100644 --- a/gradle.properties +++ b/gradle.properties @@ -13,7 +13,7 @@ org.gradle.parallel = true gsonVersion = 2.6.1 guavaVersion = 19.0 hamcrestVersion = 1.3 -jacksonVersion = 2.9.6 +jacksonVersion = 2.9.8 jsonVersion = 20160212 jsonSimpleVersion = 1.1.1 logbackVersion = 1.1.5