Skip to content

Commit e8382ab

Browse files
committed
HBASE-27424 Upgrade Jettison for CVE-2022-40149/40150 (#4822)
Jettison versions <= 1.5.0 are subject to CVE-2022-40149 and CVE-2022-40150. Move jettison.version to 1.5.1. Signed-off-by: Duo Zhang <zhangduo@apache.org>
1 parent ec8acd6 commit e8382ab

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -593,7 +593,7 @@
593593
<slf4j.version>1.7.33</slf4j.version>
594594
<clover.version>4.0.3</clover.version>
595595
<jamon-runtime.version>2.4.1</jamon-runtime.version>
596-
<jettison.version>1.3.8</jettison.version>
596+
<jettison.version>1.5.1</jettison.version>
597597
<!--Make sure these joni/jcodings are compatible with the versions used by jruby-->
598598
<joni.version>2.1.31</joni.version>
599599
<jcodings.version>1.0.55</jcodings.version>

0 commit comments

Comments
 (0)