Merge pull request #577 from devn/devn/upgrade-jackson-for-cves

Upgrade jackson for CVE-2022-42003 and CVE-2022-42004
This commit is contained in:
Tommi Reiman 2022-12-18 09:55:58 +02:00 committed by GitHub
commit 8654bf3277
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -36,8 +36,8 @@
[metosin/malli "0.8.2"]
;; https://clojureverse.org/t/depending-on-the-right-versions-of-jackson-libraries/5111
[com.fasterxml.jackson.core/jackson-core "2.13.2"]
[com.fasterxml.jackson.core/jackson-databind "2.13.2.2"]
[com.fasterxml.jackson.core/jackson-core "2.14.1"]
[com.fasterxml.jackson.core/jackson-databind "2.14.1"]
[meta-merge "1.0.0"]
[fipp "0.6.25" :exclusions [org.clojure/core.rrb-vector]]