HADOOP-17633. Bump json-smart to 2.4.2 and nimbus-jose-jwt to 9.8 due to CVEs (#2895). Contributed by Viraj Jasani.

Signed-off-by: Ayush Saxena <ayushsaxena@apache.org>
 Conflicts:
	LICENSE-binary
This commit is contained in:
Viraj Jasani 2021-04-16 12:36:01 +05:30 committed by Ayush Saxena
parent 08cc11cd28
commit 9208218704
1 changed files with 4 additions and 2 deletions

View File

@ -185,6 +185,8 @@
<hbase.two.version>2.0.0-beta-1</hbase.two.version> <hbase.two.version>2.0.0-beta-1</hbase.two.version>
<junit.version>4.13.1</junit.version> <junit.version>4.13.1</junit.version>
<woodstox.version>5.3.0</woodstox.version> <woodstox.version>5.3.0</woodstox.version>
<json-smart.version>2.4.2</json-smart.version>
<nimbus-jose-jwt.version>9.8.1</nimbus-jose-jwt.version>
</properties> </properties>
<dependencyManagement> <dependencyManagement>
@ -1350,7 +1352,7 @@
<dependency> <dependency>
<groupId>com.nimbusds</groupId> <groupId>com.nimbusds</groupId>
<artifactId>nimbus-jose-jwt</artifactId> <artifactId>nimbus-jose-jwt</artifactId>
<version>7.9</version> <version>${nimbus-jose-jwt.version}</version>
<scope>compile</scope> <scope>compile</scope>
<exclusions> <exclusions>
<exclusion> <exclusion>
@ -1373,7 +1375,7 @@
--> -->
<groupId>net.minidev</groupId> <groupId>net.minidev</groupId>
<artifactId>json-smart</artifactId> <artifactId>json-smart</artifactId>
<version>2.3</version> <version>${json-smart.version}</version>
</dependency> </dependency>
<dependency> <dependency>
<groupId>org.skyscreamer</groupId> <groupId>org.skyscreamer</groupId>