Browse Source
Fixed CWE-770 in Jackson Core (GHSA-72hv-8253-57qq)
pull/15124/head
Viacheslav Klimov
7 months ago
Failed to extract signature
1 changed files with
11 additions and
0 deletions
-
pom.xml
|
|
|
@ -40,6 +40,7 @@ |
|
|
|
<pkg.installFolder>/usr/share/${pkg.name}</pkg.installFolder> |
|
|
|
<spring-boot.version>3.4.13</spring-boot.version> |
|
|
|
<tomcat.version>10.1.52</tomcat.version> <!-- to fix CVE-2026-24734 and CVE-2025-66614. TODO: remove when fixed in spring-boot-dependencies --> |
|
|
|
<jackson.version>2.18.6</jackson.version> <!-- to fix CWE-770. TODO: remove when fixed in spring-boot-dependencies --> |
|
|
|
<javax.xml.bind-api.version>2.4.0-b180830.0359</javax.xml.bind-api.version> |
|
|
|
<jedis.version>5.1.5</jedis.version> |
|
|
|
<jjwt.version>0.12.5</jjwt.version> |
|
|
|
@ -918,6 +919,16 @@ |
|
|
|
</dependency> |
|
|
|
<!-- End of Tomcat version override --> |
|
|
|
|
|
|
|
<!-- Temporary Jackson version override --> |
|
|
|
<dependency> |
|
|
|
<groupId>com.fasterxml.jackson</groupId> |
|
|
|
<artifactId>jackson-bom</artifactId> |
|
|
|
<version>${jackson.version}</version> |
|
|
|
<type>pom</type> |
|
|
|
<scope>import</scope> |
|
|
|
</dependency> |
|
|
|
<!-- End of Jackson version override --> |
|
|
|
|
|
|
|
<dependency> |
|
|
|
<groupId>org.springframework.boot</groupId> |
|
|
|
<artifactId>spring-boot-dependencies</artifactId> |
|
|
|
|
