[ https://issues.apache.org/jira/browse/OLINGO-1407?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
mibo resolved OLINGO-1407. -------------------------- Resolution: Fixed > Update Jackson (Databind) version > --------------------------------- > > Key: OLINGO-1407 > URL: https://issues.apache.org/jira/browse/OLINGO-1407 > Project: Olingo > Issue Type: Task > Components: odata4-server > Affects Versions: (Java) V4 4.6.0 > Reporter: mibo > Assignee: mibo > Priority: Major > Fix For: (Java) V4 4.7.0 > > > Update Jackson (incl. databind) version to new minor release {{2.10.x}} > branch. > Based on changes in Jackson the deserialisation is now safer (see e.g. this > [blog > post|https://blog.gypsyengineer.com/en/security/safer-deserialization-with-new-jackson.html]. > {code} > <jackson.version>2.9.8</jackson.version> > <jackson-databind.version>2.9.9.3</jackson-databind.version> > {code} -- This message was sent by Atlassian Jira (v8.3.4#803005)