Fix PRISMA-2023-0067 in main.jar

h2oai · Apr 23, 2024 · 95aed6e · 95aed6e
1 parent 2c76f07
commit 95aed6e
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/h2o-assemblies/main/build.gradle b/h2o-assemblies/main/build.gradle
@@ -55,8 +55,10 @@ dependencies {
     api "com.google.protobuf:protobuf-java:3.21.7"
 
     constraints {
-        api('com.fasterxml.jackson.core:jackson-databind:2.13.4.2') {
+        api('com.fasterxml.jackson.core:jackson-databind:2.16.0') {
             because 'Fixes CVE-2022-42003'
+            because 'Fixes PRISMA-2023-0067'
+            because 'Fixes CVE-2023-35116'
         }
         api('org.jetbrains.kotlin:kotlin-stdlib:1.6.21') {
             because 'Fixes CVE-2020-29582'