Skip to content

Commit 377eb12

Browse files
authored
Set jackson version to 2.15.0 (#113)
Previously only databind module was set to a certain version. Now both core and databind artifacts will use the version set. Increased from 2.13.4.2. Gets rid of CVE-2025-52999 from security scanner reports.
1 parent 7a244f7 commit 377eb12

File tree

1 file changed

+7
-2
lines changed

1 file changed

+7
-2
lines changed

pom.xml

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@
2222
<scylladb.version>4.19.0.1</scylladb.version>
2323
<skipIntegrationTests>false</skipIntegrationTests>
2424
<!-- transitive dependency versions -->
25-
<jackson-databind.version>2.13.4.2</jackson-databind.version>
25+
<jackson.version>2.15.0</jackson.version>
2626
<guava.version>24.1.1-jre</guava.version>
2727
<gpg.passphrase/>
2828
<release.autopublish>false</release.autopublish>
@@ -234,10 +234,15 @@
234234

235235
<dependencyManagement>
236236
<dependencies>
237+
<dependency>
238+
<groupId>com.fasterxml.jackson.core</groupId>
239+
<artifactId>jackson-core</artifactId>
240+
<version>${jackson.version}</version>
241+
</dependency>
237242
<dependency>
238243
<groupId>com.fasterxml.jackson.core</groupId>
239244
<artifactId>jackson-databind</artifactId>
240-
<version>${jackson-databind.version}</version>
245+
<version>${jackson.version}</version>
241246
</dependency>
242247
</dependencies>
243248
</dependencyManagement>

0 commit comments

Comments
 (0)