From 8e1beb11f470b24b0cc085f30174b231ccbc0188 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 13 Nov 2019 19:57:55 +0200 Subject: [PATCH] Upgrade jackson-databind from 2.9.9 to 2.9.10.1 (#84) This upgrades jackson-databind dependency from version 2.9.9 to 2.9.10.1, which fixes various security vulnerabilities: https://www.cvedetails.com/vulnerability-list/vendor_id-15866/product_id-42991/Fasterxml-Jackson-databind.html --- scylla-apiclient/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scylla-apiclient/pom.xml b/scylla-apiclient/pom.xml index 272692b..e9972e8 100644 --- a/scylla-apiclient/pom.xml +++ b/scylla-apiclient/pom.xml @@ -68,7 +68,7 @@ com.fasterxml.jackson.core jackson-databind - 2.9.9 + 2.9.10.1 com.fasterxml.jackson.jaxrs