From 2bdee36db96cf21df57fe0c1c1e4b6303d793f86 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 3 Oct 2022 07:17:59 +0000 Subject: [PATCH 1/2] fix: CromwellRefdiskManifestCreator/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424 --- CromwellRefdiskManifestCreator/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CromwellRefdiskManifestCreator/pom.xml b/CromwellRefdiskManifestCreator/pom.xml index 3ca61910314..652e37f2379 100644 --- a/CromwellRefdiskManifestCreator/pom.xml +++ b/CromwellRefdiskManifestCreator/pom.xml @@ -48,7 +48,7 @@ com.fasterxml.jackson.core jackson-databind - 2.11.1 + 2.13.4 org.apache.logging.log4j From 5e764695c09f23fe41276264452b67599f0dede5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 31 Mar 2023 15:15:14 +0000 Subject: [PATCH 2/2] Bump jackson-databind in /CromwellRefdiskManifestCreator Bumps [jackson-databind](https://github.com/FasterXML/jackson) from 2.13.4 to 2.13.4.2. - [Release notes](https://github.com/FasterXML/jackson/releases) - [Commits](https://github.com/FasterXML/jackson/commits) --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- CromwellRefdiskManifestCreator/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CromwellRefdiskManifestCreator/pom.xml b/CromwellRefdiskManifestCreator/pom.xml index 652e37f2379..300e4d073eb 100644 --- a/CromwellRefdiskManifestCreator/pom.xml +++ b/CromwellRefdiskManifestCreator/pom.xml @@ -48,7 +48,7 @@ com.fasterxml.jackson.core jackson-databind - 2.13.4 + 2.13.4.2 org.apache.logging.log4j