Browse Source

temp fix for vulnerability in upstream lib
[ci skip]

Sebastian Stenzel 4 years ago
parent
commit
8479122561
1 changed files with 7 additions and 0 deletions
  1. 7 0
      main/pom.xml

+ 7 - 0
main/pom.xml

@@ -175,6 +175,13 @@
 				<artifactId>java-jwt</artifactId>
 				<version>${jwt.version}</version>
 			</dependency>
+			<!-- fixes CVE-2020-25649, can be removed once https://github.com/auth0/java-jwt/pull/463 is closed and released -->
+			<dependency>
+				<groupId>com.fasterxml.jackson.core</groupId>
+				<artifactId>jackson-databind</artifactId>
+				<version>2.10.5.1</version>
+			</dependency>
+
 
 			<!-- EasyBind -->
 			<dependency>