Details
-
Story
-
Status: Done
-
Highest
-
Resolution: Done
-
1.0.1
-
None
-
None
Description
Upgrade from Jackson 1.9 to Jackson 2.x to fix high security vulnerability:
Improper Restriction of XML External Entity Reference in jackson-mapper-asl
The following Jackson 1.9 dependencies will need to be replaced with Jackson 2.x equivalents:
<dependency> <groupId>org.codehaus.jackson</groupId> <artifactId>jackson-core-asl</artifactId> <version>1.9.13</version> </dependency> <dependency> <groupId>org.codehaus.jackson</groupId> <artifactId>jackson-jaxrs</artifactId> <version>1.9.13</version> </dependency> <dependency> <groupId>org.codehaus.jackson</groupId> <artifactId>jackson-mapper-asl</artifactId> <version>1.9.13</version> </dependency>
The following modules utilize these dependencies:
- community/bolt
- community/push-to-cloud
- community/server
There are 76 matches across 40 files for the Jackson 1.9 import:
import org.codehaus.jackson
