update jackson and jackson.databind version to fixes many security issues (#9572)

2 years ago · 006bcca532
1 changed files with 3 additions and 2 deletions
--- a/dolphinscheduler-data-quality/pom.xml
+++ b/dolphinscheduler-data-quality/pom.xml
@ -32,7 +32,8 @@
    <properties>
        <scala.binary.version>2.11</scala.binary.version>
        <spark.version>2.4.0</spark.version>
-        <jackson.version>2.9.0</jackson.version>
+        <jackson.version>2.9.10</jackson.version>
+        <jackson.databind.version>2.9.10.8</jackson.databind.version>
        <scope>provided</scope>
    </properties>

@ -139,7 +140,7 @@
        <dependency>
            <groupId>com.fasterxml.jackson.core</groupId>
            <artifactId>jackson-databind</artifactId>
-            <version>${jackson.version}</version>
+            <version>${jackson.databind.version}</version>
            <scope>${scope}</scope>
            <exclusions>
                <exclusion>