Jackson 2.13.4.2 (#1925)

Signed-off-by: David Venable <[email protected]> (cherry picked from commit 941f808)
opensearch-project · Oct 18, 2022 · 707280d · 707280d
1 parent 970af02
commit 707280d
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -111,6 +111,12 @@ subprojects {
                 }
                 because 'the build fails if the Log4j API is not update along with log4j-core'
             }
+            implementation('com.fasterxml.jackson.core:jackson-databind') {
+                version {
+                    require '2.13.4.2'
+                }
+                because 'Fixes CVE-2022-42003. Keep this until Data Prepper uses 2.14.'
+            }
             implementation('com.google.code.gson:gson') {
                 version {
                     require '2.8.9'