From 0e216c137859a4804f8d2fb4cbf5bb0bade52a94 Mon Sep 17 00:00:00 2001
From: chi-chi weng <949409306@qq.com>
Date: Wed, 20 May 2020 18:36:16 +0800
Subject: [PATCH] Jackson has a serious security problem in 2.9.5, which will
 cause RCE

https://github.com/FasterXML/jackson-databind/issues/2295
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index dc66173cfd9..452ebdb4759 100644
--- a/pom.xml
+++ b/pom.xml
@@ -113,7 +113,7 @@
     <commons-pool.version>2.5.0</commons-pool.version>
 
     <!-- Calcite deps, keep compatible with calcite.version -->
-    <jackson.version>2.9.5</jackson.version>
+    <jackson.version>2.9.10.3</jackson.version>
 
     <!-- Test Dependency versions -->
     <antlr.version>3.4</antlr.version>