aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorsharath reddy <bs.reddy@huawei.com>2021-08-19 15:50:10 +0530
committersharath reddy <bs.reddy@huawei.com>2021-08-24 16:52:48 +0530
commit36f64298464e80623f5d1907f20f5e6d7e0020ae (patch)
treef45d12d1dced7312af09a3bac7a7640fa9497045
parent863b5cfb4819b332d8e038bf21311cd50058cb6c (diff)
fix Istanbul CLI vulnerabilities
Issue-ID: CLI-401 Signed-off-by: sharath reddy <bs.reddy@huawei.com> Change-Id: I0ca2826bfb3d41ce90e78d1a0ec69109b1ab260c Signed-off-by: sharath reddy <bs.reddy@huawei.com>
-rw-r--r--framework/pom.xml4
-rw-r--r--profiles/http/pom.xml6
2 files changed, 5 insertions, 5 deletions
diff --git a/framework/pom.xml b/framework/pom.xml
index 024d1a64..e0853efa 100644
--- a/framework/pom.xml
+++ b/framework/pom.xml
@@ -101,7 +101,7 @@
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
- <version>2.11.0</version>
+ <version>2.12.1</version>
<exclusions>
<exclusion>
<groupId>com.fasterxml.jackson.core</groupId>
@@ -112,7 +112,7 @@
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-core</artifactId>
- <version>2.11.0</version>
+ <version>2.12.1</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.dataformat</groupId>
diff --git a/profiles/http/pom.xml b/profiles/http/pom.xml
index a89ba75d..e937c436 100644
--- a/profiles/http/pom.xml
+++ b/profiles/http/pom.xml
@@ -52,7 +52,7 @@ Excluded commons-codec vulnerable version and added invulnerable version
<dependency>
<groupId>org.apache.httpcomponents</groupId>
<artifactId>httpclient</artifactId>
- <version>4.5.7</version>
+ <version>4.5.13</version>
<exclusions>
<exclusion>
<groupId>commons-codec</groupId>
@@ -110,7 +110,7 @@ Excluded commons-codec vulnerable version and added invulnerable version
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-codec-http</artifactId>
- <version>4.1.48.Final</version>
+ <version>4.1.63.Final</version>
</dependency>
<dependency>
<groupId>junit</groupId>
@@ -133,7 +133,7 @@ Excluded commons-codec vulnerable version and added invulnerable version
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
- <version>2.10.0</version>
+ <version>2.12.1</version>
</dependency>
</dependencies>
<build>