Skip to content

Commit 927a6f7

Browse files
authored
[CONNECTOR-1431] Aerospike Streaming Connectors - Security vulnerabilities - Jackson-core (#96)
* Removed ignore Jackson vulnerability * Upgraded jackson library to fix vulnerability
1 parent cf084c6 commit 927a6f7

3 files changed

Lines changed: 5 additions & 9 deletions

File tree

.snyk

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,10 +3,5 @@ ignore:
33
- '*':
44
reason: Library Exception allows non-free use of gnu-crypto
55
expires: 2026-12-31T23:59:59.614Z
6-
'SNYK-JAVA-COMFASTERXMLJACKSONCORE-15907551':
7-
- '*':
8-
reason: Jackson 2.18.7 is under development and can't upgrade to 2.21.2 due to conflicts in inbound connectors
9-
expires: 2026-04-30T11:38:28.614Z
10-
116
exclude:
127
- ./examples

build.gradle.kts

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -69,8 +69,9 @@ allprojects {
6969
group = "com.aerospike"
7070

7171
// Common dependency versions.
72-
extra["aerospikeClientVersion"] = "10.0.0"
73-
extra["jacksonVersion"] = "2.18.6"
72+
extra["aerospikeClientVersion"] = "9.3.0"
73+
extra["jacksonVersion"] = "2.21.2"
74+
extra["jacksonAnnotationVersion"] = "2.21"
7475

7576
dependencies {
7677
// Lombok for its @Generated annotation that jacoco ignores
@@ -85,7 +86,7 @@ allprojects {
8586
"api"("com.aerospike:aerospike-client-jdk8:${project.extra["aerospikeClientVersion"]}")
8687

8788
// Jackson annotation
88-
"api"("com.fasterxml.jackson.core:jackson-annotations:${project.extra["jacksonVersion"]}")
89+
"api"("com.fasterxml.jackson.core:jackson-annotations:${project.extra["jacksonAnnotationVersion"]}")
8990

9091
// Test dependencies
9192
testImplementation("com.aerospike:aerospike-client-jdk8:${project.extra["aerospikeClientVersion"]}")

buildSrc/build.gradle.kts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ dependencies {
3434
api("com.github.breadmoirai:github-release:2.5.2")
3535
api("com.github.ben-manes:gradle-versions-plugin:+")
3636

37-
val jacksonVersion = "2.18.6"
37+
val jacksonVersion = "2.21.2"
3838
api("com.fasterxml.jackson.core:jackson-databind:$jacksonVersion")
3939
api("com.fasterxml.jackson.module:jackson-module-kotlin:$jacksonVersion")
4040
}

0 commit comments

Comments
 (0)