se-edu/addressbook-level3

Jackson Dependency has vulnerable version

yhtMinceraft1010X opened this issue · 0 comments

The dependencies are shown below:

implementation group: 'com.fasterxml.jackson.core', name: 'jackson-databind', version: '2.7.0'
implementation group: 'com.fasterxml.jackson.datatype', name: 'jackson-datatype-jsr310', version: '2.7.4'

The corresponding report regarding the dependencies is given in the below file:
AB3 Dependency-Check Report.pdf

It is recommended to upgrade to at least 2.9.8. However, an issue regarding relative path serialization is causing some test cases to fail due to the output paths being absolute.