15eb6adf92
Jackson 2.9.x has various vulnerabilities that are fixed in 2.10 series: https://github.com/FasterXML/jackson-databind/issues/2700#issuecomment-619590967 Let's update to the latest version of Jackson. This is a similar fix to Github's Dependabot proposal, except we bump the version number across all Jackson components: https://github.com/scylladb/scylla-jmx/pull/116
86 lines
2.9 KiB
XML
86 lines
2.9 KiB
XML
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
|
|
<modelVersion>4.0.0</modelVersion>
|
|
|
|
<groupId>com.scylladb.jmx</groupId>
|
|
<artifactId>scylla-apiclient</artifactId>
|
|
<packaging>jar</packaging>
|
|
<version>1.0</version>
|
|
|
|
<name>Scylla REST API client</name>
|
|
|
|
<properties>
|
|
<maven.compiler.target>1.8</maven.compiler.target>
|
|
<maven.compiler.source>1.8</maven.compiler.source>
|
|
<jackson.version>2.10.4</jackson.version>
|
|
</properties>
|
|
|
|
<dependencies>
|
|
<dependency>
|
|
<groupId>org.yaml</groupId>
|
|
<artifactId>snakeyaml</artifactId>
|
|
<version>1.16</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.glassfish.jersey.core</groupId>
|
|
<artifactId>jersey-common</artifactId>
|
|
<version>2.22.1</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>javax.ws.rs</groupId>
|
|
<artifactId>javax.ws.rs-api</artifactId>
|
|
<version>2.0.1</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>javax.ws.rs</groupId>
|
|
<artifactId>jsr311-api</artifactId>
|
|
<version>1.1.1</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.glassfish.jersey.core</groupId>
|
|
<artifactId>jersey-client</artifactId>
|
|
<version>2.22.1</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.glassfish</groupId>
|
|
<artifactId>javax.json</artifactId>
|
|
<version>1.0.4</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>com.google.guava</groupId>
|
|
<artifactId>guava</artifactId>
|
|
<version>29.0-jre</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>com.google.collections</groupId>
|
|
<artifactId>google-collections</artifactId>
|
|
<version>1.0</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>javax.activation</groupId>
|
|
<artifactId>activation</artifactId>
|
|
<version>1.1</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>com.fasterxml.jackson.core</groupId>
|
|
<artifactId>jackson-annotations</artifactId>
|
|
<version>${jackson.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>com.fasterxml.jackson.core</groupId>
|
|
<artifactId>jackson-databind</artifactId>
|
|
<version>${jackson.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>com.fasterxml.jackson.jaxrs</groupId>
|
|
<artifactId>jackson-jaxrs-json-provider</artifactId>
|
|
<version>${jackson.version}</version>
|
|
</dependency>
|
|
</dependencies>
|
|
|
|
<build>
|
|
|
|
</build>
|
|
|
|
</project>
|