Commit 7580307
[BUILD] Bump fasterxml.jackson from 2.9.10 to 2.10.0
What changes were proposed in this pull request?
The current code uses com.fasterxml.jackson.core:jackson-databind:jar:2.9.10 and it will cause a security vulnerabilities.
We referenced GHSA-mx7p-6679-8g3q
This Alert remind to upgrate the version of jackson-databind to 2.9.10.1 or later.
I referenced Spark 3.0.0 contains jackson-databind:jar:2.10.0.1 parent d25e615 commit 7580307
1 file changed
+2
-2
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
138 | 138 | | |
139 | 139 | | |
140 | 140 | | |
141 | | - | |
142 | | - | |
| 141 | + | |
| 142 | + | |
143 | 143 | | |
144 | 144 | | |
145 | 145 | | |
| |||
0 commit comments