|
139 | 139 |
|
140 | 140 | <!-- Jackson versions should be kept in sync when possible but can diverge slightly |
141 | 141 | when vulnerabilities or other fixes affect some but not all components --> |
142 | | - <jackson-databind.version>2.18.6</jackson-databind.version> |
143 | | - <jackson-datatype-jdk8.version>2.18.6</jackson-datatype-jdk8.version> |
144 | | - <jackson-dataformat-yaml.version>2.18.6</jackson-dataformat-yaml.version> |
145 | | - <jackson-datatype-jsr310.version>2.18.6</jackson-datatype-jsr310.version> |
146 | | - <jackson-annotations.version>2.18.3</jackson-annotations.version> |
| 142 | + <jackson-databind.version>2.21.2</jackson-databind.version> |
| 143 | + <jackson-datatype-jdk8.version>2.21.2</jackson-datatype-jdk8.version> |
| 144 | + <jackson-dataformat-yaml.version>2.21.2</jackson-dataformat-yaml.version> |
| 145 | + <jackson-datatype-jsr310.version>2.21.2</jackson-datatype-jsr310.version> |
| 146 | + <jackson-annotations.version>2.21</jackson-annotations.version> |
147 | 147 | <!-- This snakeyaml version overrides the one normally imported by jackson-dataformat-yaml. --> |
148 | 148 | <snakeyaml.version>2.4</snakeyaml.version> |
149 | 149 |
|
|
305 | 305 |
|
306 | 306 | <dependencyManagement> |
307 | 307 | <dependencies> |
308 | | - <!-- Fix for Snyk vulnerability (CWE-93)--> |
| 308 | + <!-- Fix for Snyk vulnerability (CWE-770)--> |
| 309 | + <dependency> |
| 310 | + <groupId>io.netty</groupId> |
| 311 | + <artifactId>netty-codec-http2</artifactId> |
| 312 | + <version>4.1.132.Final</version> |
| 313 | + </dependency> |
| 314 | + |
| 315 | + <!-- Fix for Snyk vulnerability (CWE-93 and CWE-444)--> |
309 | 316 | <dependency> |
310 | 317 | <groupId>io.netty</groupId> |
311 | 318 | <artifactId>netty-codec-http</artifactId> |
312 | | - <version>4.1.129.Final</version> |
| 319 | + <version>4.1.132.Final</version> |
313 | 320 | </dependency> |
314 | 321 | <!-- Fix for Snyk vulnerability (CWE-835 and CWE-770)--> |
315 | 322 | <dependency> |
|
0 commit comments