Skip to content

Commit 7905cff

Browse files
Merge branch 'master' into feature/BFD-4351_Python-CI
2 parents d9bec55 + c841de1 commit 7905cff

1 file changed

Lines changed: 14 additions & 7 deletions

File tree

apps/pom.xml

Lines changed: 14 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -139,11 +139,11 @@
139139

140140
<!-- Jackson versions should be kept in sync when possible but can diverge slightly
141141
when vulnerabilities or other fixes affect some but not all components -->
142-
<jackson-databind.version>2.18.6</jackson-databind.version>
143-
<jackson-datatype-jdk8.version>2.18.6</jackson-datatype-jdk8.version>
144-
<jackson-dataformat-yaml.version>2.18.6</jackson-dataformat-yaml.version>
145-
<jackson-datatype-jsr310.version>2.18.6</jackson-datatype-jsr310.version>
146-
<jackson-annotations.version>2.18.3</jackson-annotations.version>
142+
<jackson-databind.version>2.21.2</jackson-databind.version>
143+
<jackson-datatype-jdk8.version>2.21.2</jackson-datatype-jdk8.version>
144+
<jackson-dataformat-yaml.version>2.21.2</jackson-dataformat-yaml.version>
145+
<jackson-datatype-jsr310.version>2.21.2</jackson-datatype-jsr310.version>
146+
<jackson-annotations.version>2.21</jackson-annotations.version>
147147
<!-- This snakeyaml version overrides the one normally imported by jackson-dataformat-yaml. -->
148148
<snakeyaml.version>2.4</snakeyaml.version>
149149

@@ -305,11 +305,18 @@
305305

306306
<dependencyManagement>
307307
<dependencies>
308-
<!-- Fix for Snyk vulnerability (CWE-93)-->
308+
<!-- Fix for Snyk vulnerability (CWE-770)-->
309+
<dependency>
310+
<groupId>io.netty</groupId>
311+
<artifactId>netty-codec-http2</artifactId>
312+
<version>4.1.132.Final</version>
313+
</dependency>
314+
315+
<!-- Fix for Snyk vulnerability (CWE-93 and CWE-444)-->
309316
<dependency>
310317
<groupId>io.netty</groupId>
311318
<artifactId>netty-codec-http</artifactId>
312-
<version>4.1.129.Final</version>
319+
<version>4.1.132.Final</version>
313320
</dependency>
314321
<!-- Fix for Snyk vulnerability (CWE-835 and CWE-770)-->
315322
<dependency>

0 commit comments

Comments
 (0)