diff --git a/CHANGES b/CHANGES index 8985039..1df9628 100644 --- a/CHANGES +++ b/CHANGES @@ -1,5 +1,9 @@ FusionAuth JWT Changes + +Changes in 3.1.2 + * Upgraded Jackson Databind to 2.9.9.1. This upgrade addresses CVE-2019-12814. + Changes in 3.1.1 * Add .equals(), .hashCode() and .toString() to io.fusionauth.jwt.domain.Header diff --git a/build.savant b/build.savant index 2c3546e..b423c2b 100644 --- a/build.savant +++ b/build.savant @@ -17,7 +17,7 @@ savantVersion = "1.0.0" jacksonVersion = "2.9.9" -project(group: "io.fusionauth", name: "fusionauth-jwt", version: "3.1.1", licenses: ["ApacheV2_0"]) { +project(group: "io.fusionauth", name: "fusionauth-jwt", version: "3.1.2", licenses: ["ApacheV2_0"]) { workflow { standard() @@ -30,7 +30,7 @@ project(group: "io.fusionauth", name: "fusionauth-jwt", version: "3.1.1", licens dependencies { group(name: "compile") { dependency(id: "com.fasterxml.jackson.core:jackson-core:${jacksonVersion}") - dependency(id: "com.fasterxml.jackson.core:jackson-databind:${jacksonVersion}") + dependency(id: "com.fasterxml.jackson.core:jackson-databind:2.9.10+2.9.9.1") dependency(id: "com.fasterxml.jackson.core:jackson-annotations:${jacksonVersion}") } group(name: "test-compile", export: false) { diff --git a/pom.xml b/pom.xml index 5900677..b8e1d8d 100644 --- a/pom.xml +++ b/pom.xml @@ -6,7 +6,7 @@ io.fusionauth fusionauth-jwt - 3.1.1 + 3.1.2 jar FusionAuth JWT @@ -65,7 +65,7 @@ com.fasterxml.jackson.core jackson-databind - 2.9.9 + 2.9.9.1 com.fasterxml.jackson.core