Merge pull request #58 from MeasureAuthoringTool/Update-jackson-core-to-resolve-critical-vulns

MAT-10213 Update jackson core to resolve critical vulns

Author: riddhi-desai

pom.xml

@@ -67,7 +67,18 @@
 		<dependency>
 			<groupId>com.fasterxml.jackson.core</groupId>
 			<artifactId>jackson-core</artifactId>
-			<version>2.21.2</version>
+			<version>2.21.5</version>
+		</dependency>
+		<!-- override jackson-databind from 2.21.1 to 2.21.5 pulled in through hapi-fhir 8.10.0 due to critical vulns -->
+		<dependency>
+			<groupId>com.fasterxml.jackson.core</groupId>
+			<artifactId>jackson-databind</artifactId>
+			<version>2.21.5</version>
+		</dependency>
+		<dependency>
+			<groupId>com.fasterxml.jackson.core</groupId>
+			<artifactId>jackson-annotations</artifactId>
+			<version>2.22</version>
 		</dependency>
 		<dependency>
 			<groupId>org.projectlombok</groupId>