Jackson 2.13.4.2 (#1925)

Signed-off-by: David Venable <[email protected]>
opensearch-project · Oct 18, 2022 · 941f808 · 941f808
1 parent a66da8e
commit 941f808
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -111,6 +111,12 @@ subprojects {
                 }
                 because 'the build fails if the Log4j API is not update along with log4j-core'
             }
+            implementation('com.fasterxml.jackson.core:jackson-databind') {
+                version {
+                    require '2.13.4.2'
+                }
+                because 'Fixes CVE-2022-42003. Keep this until Data Prepper uses 2.14.'
+            }
             implementation('com.google.code.gson:gson') {
                 version {
                     require '2.8.9'