diff --git a/CHANGES b/CHANGES
index 8985039..1df9628 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,5 +1,9 @@
FusionAuth JWT Changes
+
+Changes in 3.1.2
+ * Upgraded Jackson Databind to 2.9.9.1. This upgrade addresses CVE-2019-12814.
+
Changes in 3.1.1
* Add .equals(), .hashCode() and .toString() to io.fusionauth.jwt.domain.Header
diff --git a/build.savant b/build.savant
index 2c3546e..b423c2b 100644
--- a/build.savant
+++ b/build.savant
@@ -17,7 +17,7 @@
savantVersion = "1.0.0"
jacksonVersion = "2.9.9"
-project(group: "io.fusionauth", name: "fusionauth-jwt", version: "3.1.1", licenses: ["ApacheV2_0"]) {
+project(group: "io.fusionauth", name: "fusionauth-jwt", version: "3.1.2", licenses: ["ApacheV2_0"]) {
workflow {
standard()
@@ -30,7 +30,7 @@ project(group: "io.fusionauth", name: "fusionauth-jwt", version: "3.1.1", licens
dependencies {
group(name: "compile") {
dependency(id: "com.fasterxml.jackson.core:jackson-core:${jacksonVersion}")
- dependency(id: "com.fasterxml.jackson.core:jackson-databind:${jacksonVersion}")
+ dependency(id: "com.fasterxml.jackson.core:jackson-databind:2.9.10+2.9.9.1")
dependency(id: "com.fasterxml.jackson.core:jackson-annotations:${jacksonVersion}")
}
group(name: "test-compile", export: false) {
diff --git a/pom.xml b/pom.xml
index 5900677..b8e1d8d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -6,7 +6,7 @@
io.fusionauth
fusionauth-jwt
- 3.1.1
+ 3.1.2
jar
FusionAuth JWT
@@ -65,7 +65,7 @@
com.fasterxml.jackson.core
jackson-databind
- 2.9.9
+ 2.9.9.1
com.fasterxml.jackson.core