upgrade jackson-databind because of security issues

CVE-2019-16335 FasterXML/jackson-databind#2449 CVE-2019-14540 FasterXML/jackson-databind#2410
marco-schmidt · Sep 18, 2019 · 9a566b5 · 9a566b5
1 parent 72d9f92
commit 9a566b5
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/build.gradle b/build.gradle
@@ -53,8 +53,8 @@ dependencies {
 configurations.all {
   resolutionStrategy.eachDependency { DependencyResolveDetails details ->
     if (details.requested.group == 'com.fasterxml.jackson.core' && details.requested.name == 'jackson-databind') {
-      details.useVersion '2.9.9.3'
-      details.because 'CVE-2019-12814'
+      details.useVersion '2.10.0.pr3'
+      details.because 'CVE-2019-16335, CVE-2019-14540'
     }
     if (details.requested.group == 'commons-beanutils' && details.requested.name == 'commons-beanutils') {
       details.useVersion '1.9.4'