From 82fbe6c0d55da9fbbe2556907ad1ad40bcffccbb Mon Sep 17 00:00:00 2001
From: Bruno Oliveira da Silva <bruno@abstractj.com>
Date: Fri, 8 Apr 2022 09:33:09 -0300
Subject: [PATCH] Update jackson-databind dependency in the main POM file to
 fix CVE-2020-36518

Resolves #11188
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index d7ffe6c24a0..a4023548be2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -88,7 +88,7 @@
         <infinispan.protostream.processor.version>4.4.1.Final</infinispan.protostream.processor.version>
         <javax.annotation-api.version>1.3.2</javax.annotation-api.version>
         <jackson.version>2.12.1</jackson.version>
-        <jackson.databind.version>${jackson.version}</jackson.databind.version>
+        <jackson.databind.version>2.12.6.1</jackson.databind.version>
         <jackson.annotations.version>${jackson.databind.version}</jackson.annotations.version>
         <jakarta.mail.version>1.6.5</jakarta.mail.version>
         <jboss-jaxrs-api_2.1_spec>2.0.1.Final</jboss-jaxrs-api_2.1_spec>