Jackson has a serious security problem in 2.9.5, which will cause RCE

FasterXML/jackson-databind#2295
wcc526 · May 20, 2020 · 0e216c1 · 0e216c1
1 parent 7886a24
commit 0e216c1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pom.xml b/pom.xml
@@ -113,7 +113,7 @@
     <commons-pool.version>2.5.0</commons-pool.version>
 
     <!-- Calcite deps, keep compatible with calcite.version -->
-    <jackson.version>2.9.5</jackson.version>
+    <jackson.version>2.9.10.3</jackson.version>
 
     <!-- Test Dependency versions -->
     <antlr.version>3.4</antlr.version>