From 95aed6ed5893200bed2efd3abcd26c7ac1fb2a60 Mon Sep 17 00:00:00 2001 From: Adam Valenta Date: Mon, 22 Apr 2024 17:56:54 +0200 Subject: [PATCH] Fix PRISMA-2023-0067 in main.jar --- h2o-assemblies/main/build.gradle | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/h2o-assemblies/main/build.gradle b/h2o-assemblies/main/build.gradle index d836c896f4ad..8e36ccf613ce 100644 --- a/h2o-assemblies/main/build.gradle +++ b/h2o-assemblies/main/build.gradle @@ -55,8 +55,10 @@ dependencies { api "com.google.protobuf:protobuf-java:3.21.7" constraints { - api('com.fasterxml.jackson.core:jackson-databind:2.13.4.2') { + api('com.fasterxml.jackson.core:jackson-databind:2.16.0') { because 'Fixes CVE-2022-42003' + because 'Fixes PRISMA-2023-0067' + because 'Fixes CVE-2023-35116' } api('org.jetbrains.kotlin:kotlin-stdlib:1.6.21') { because 'Fixes CVE-2020-29582'