Skip to content

Commit

Permalink
Upgraded jackson-version to 2.8.10 (#134)
Browse files Browse the repository at this point in the history
* Upgraded jackson databind version to 2.8.10

There is a possibily of Remote Code Execution (RCE) Through Deserialization in jackson-databind version 2.8.4
  • Loading branch information
batrashubham authored and nmorel committed Dec 14, 2017
1 parent 8a76189 commit c2c3b12
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 1 deletion.
1 change: 1 addition & 0 deletions .travis.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,5 +4,6 @@ sudo: false

jdk:
- oraclejdk8


script: mvn clean install -Dgwt.compiler.skip=true
2 changes: 1 addition & 1 deletion pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -90,7 +90,7 @@

<!-- Dependencies version -->
<gwt.version>2.7.0</gwt.version>
<jackson.version>2.8.4</jackson.version>
<jackson.version>2.8.10</jackson.version>
<javapoet.version>1.0.0</javapoet.version>
<junit.version>4.12</junit.version>
</properties>
Expand Down

0 comments on commit c2c3b12

Please sign in to comment.