From f0c547ddb5603e3df46a909421c545c5ec62652c Mon Sep 17 00:00:00 2001 From: Ivan Hrasko Date: Wed, 8 Feb 2023 17:03:21 +0100 Subject: [PATCH] Bump json-unit-assertj to 2.36.1 Fix CVE-2022-42003 by bumping json-unit-assertj to 2.36.1 which uses fixed jackson-databind version 2.14.0. Change-Id: I3ab3cb9e03393ea1d223616e0b013f7f10e6a74c Signed-off-by: Ivan Hrasko (cherry picked from commit 4c0bdb9e23281e579ec9b90a510bd2f0844de502) --- restconf/restconf-nb/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/restconf/restconf-nb/pom.xml b/restconf/restconf-nb/pom.xml index 72e7476344..dcd0d434d7 100644 --- a/restconf/restconf-nb/pom.xml +++ b/restconf/restconf-nb/pom.xml @@ -289,7 +289,7 @@ net.javacrumbs.json-unit json-unit-assertj - 2.36.0 + 2.36.1 test -- 2.36.6