Upgrade jackson-databind version to 2.9.10 (#4565)

This commit is contained in:
吴晟 Wu Sheng 2020-03-24 18:42:08 +08:00 committed by GitHub
parent 7c9b6cf054
commit f1b2b298b1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 14 additions and 1 deletions

View File

@ -38,6 +38,7 @@
<spring-cloud-dependencies.version>Edgware.SR1</spring-cloud-dependencies.version>
<frontend-maven-plugin.version>1.6</frontend-maven-plugin.version>
<logback-classic.version>1.2.3</logback-classic.version>
<jackson-version>2.9.10</jackson-version>
<ui.path>${project.parent.basedir}/skywalking-ui</ui.path>
</properties>
@ -64,6 +65,18 @@
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-actuator</artifactId>
<version>${spring.boot.version}</version>
<exclusions>
<exclusion>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
</exclusion>
</exclusions>
</dependency>
<!-- https://www.cvedetails.com/cve/CVE-2019-17267/ -->
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
<version>${jackson-version}</version>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>

View File

@ -278,7 +278,7 @@ The text of each license is the standard Apache 2.0 license.
instrumentation-api 0.4.3: https://github.com/google/instrumentation-java, Apache 2.0
jackson-annotations 2.8.0: https://github.com/FasterXML/jackson-annotations, Apache 2.0
jackson-core 2.8.8: https://github.com/FasterXML/jackson-core, Apache 2.0
jackson-databind 2.8.8: https://github.com/FasterXML/jackson-databind, Apache 2.0
jackson-databind 2.9.10: https://github.com/FasterXML/jackson-databind, Apache 2.0
jackson-dataformat 2.8.6: https://github.com/FasterXML/jackson-dataformats-binary, Apache 2.0
jackson-datatype-jdk8 2.8.8: https://github.com/FasterXML/jackson-modules-java8/tree/jackson-modules-java8-2.8.8, Apache 2.0
jackson-module-kotlin 2.8.8: http://kotlinlang.org, Apache 2.0