commit a4a4fed5a774092320f8471222982650937c121f
author Willem Jiang <willem.jiang@gmail.com> Fri Feb 25 17:57:39 2022 +0800
committer Lei Zhang <zhanglei@apache.org> Wed Mar 02 15:24:49 2022 +0800
tree 0d8de63d2feb34999f69cee0f0588f0b23d03ee6
parent 27ada3b702c3f1c6c3154230637781539e95a834

SCB-2368 Fixed the CVE issue with CVSS 10

pom.xml

diff --git a/pom.xml b/pom.xml
index f8ca805..6b3b6cd 100644
--- a/pom.xml
+++ b/pom.xml
@@ -65,7 +65,7 @@
     <kryo.version>4.0.1</kryo.version>
     <javax.transaction.version>1.2</javax.transaction.version>
     <eclipse.link.version>2.7.1</eclipse.link.version>
-    <jackson.version>2.9.0</jackson.version>
+    <jackson.version>2.13.2</jackson.version>
     <byteman.version>4.0.1</byteman.version>
     <jaxb.version>2.3.0</jaxb.version>
     <javax.activation.version>1.1.1</javax.activation.version>
@@ -886,7 +886,7 @@
             <configuration>
               <name>notifier-dependency-check</name>
               <format>HTML</format>
-              <failBuildOnCVSS>9</failBuildOnCVSS>
+              <failBuildOnCVSS>10</failBuildOnCVSS>
               <failOnError>false</failOnError>
               <skipProvidedScope>true</skipProvidedScope>
               <skipRuntimeScope>true</skipRuntimeScope>