Merge pull request msgpack#467 from msgpack/fix-jackson-security-vulnerability2

komamitsu · web-flow · commit b00b0db72c23 · 2018-02-23T22:11:44.000+09:00
Use jackson-databind 2.8.11.1 for security vulnerability
diff --git a/build.sbt b/build.sbt
@@ -115,7 +115,7 @@ lazy val msgpackJackson =
         "org.msgpack.jackson.dataformat"
       ),
       libraryDependencies ++= Seq(
-        "com.fasterxml.jackson.core" % "jackson-databind" % "2.7.9.1",
+        "com.fasterxml.jackson.core" % "jackson-databind" % "2.8.11.1",
         junitInterface,
         "org.apache.commons" % "commons-math3" % "3.6.1" % "test"
       ),
