Security fix for CVE-2022-42003
Change-Id: I0457221ad7941395f03b5c3a3f6f7045105bff3e
diff --git a/Changes b/Changes
index d479022..8591821 100644
--- a/Changes
+++ b/Changes
@@ -1,3 +1,7 @@
+0.2.8 2022-10-05
+ - Upgrade dependencies following dependabot.
+ This fixes CVE-2022-42003! Please update!
+
0.2.7 2021-10-13
- Upgrade dependency on Junit following dependabot.
- Upgrade dependency on Jackson following dependabot.
diff --git a/pom.xml b/pom.xml
index 777034c..bc84a5f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -4,7 +4,7 @@
<groupId>de.ids_mannheim.korap</groupId>
<artifactId>KalamarExportPlugin</artifactId>
<packaging>jar</packaging>
- <version>0.2.7</version>
+ <version>0.2.8</version>
<name>KalamarExportPlugin</name>
<url>https://korap.ids-mannheim.de/</url>
@@ -33,7 +33,7 @@
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
- <version>2.13.4</version>
+ <version>2.14.0-rc1</version>
</dependency>
<!-- jetty -->