fix CVE-2019-16942, CVE-2019-16943

by upgrading dependency jackson-databind/ to 2.10.0 FasterXML/jackson-databind#2478
marco-schmidt · Oct 9, 2019 · 3b0ba36 · 3b0ba36
1 parent d49f34b
commit 3b0ba36
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/build.gradle b/build.gradle
@@ -62,8 +62,8 @@ tasks.withType(JavaCompile) {
 configurations.all {
   resolutionStrategy.eachDependency { DependencyResolveDetails details ->
     if (details.requested.group == 'com.fasterxml.jackson.core' && details.requested.name == 'jackson-databind') {
-      details.useVersion '2.9.10'
-      details.because 'CVE-2019-16335, CVE-2019-14540'
+      details.useVersion '2.10.0'
+      details.because 'CVE-2019-16942, CVE-2019-16943'
     }
     if (details.requested.group == 'commons-beanutils' && details.requested.name == 'commons-beanutils') {
       details.useVersion '1.9.4'