update jackson and jackson.databind version to fixes many security issues (#9572)

dependabot/maven/org.springframework-spring-core-5.3.19
PJ Fanning 2022-04-20 11:34:48 +02:00 committed by GitHub
parent 7fecb92fc2
commit 006bcca532
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 2 deletions

View File

@ -32,7 +32,8 @@
<properties> <properties>
<scala.binary.version>2.11</scala.binary.version> <scala.binary.version>2.11</scala.binary.version>
<spark.version>2.4.0</spark.version> <spark.version>2.4.0</spark.version>
<jackson.version>2.9.0</jackson.version> <jackson.version>2.9.10</jackson.version>
<jackson.databind.version>2.9.10.8</jackson.databind.version>
<scope>provided</scope> <scope>provided</scope>
</properties> </properties>
@ -139,7 +140,7 @@
<dependency> <dependency>
<groupId>com.fasterxml.jackson.core</groupId> <groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId> <artifactId>jackson-databind</artifactId>
<version>${jackson.version}</version> <version>${jackson.databind.version}</version>
<scope>${scope}</scope> <scope>${scope}</scope>
<exclusions> <exclusions>
<exclusion> <exclusion>