[tika] branch main updated: TIKA-3869 -- ignore ossindex on databind for now

[ta...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

tallison pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tika.git


The following commit(s) were added to refs/heads/main by this push:
     new 96df8d989 TIKA-3869 -- ignore ossindex on databind for now
96df8d989 is described below

commit 96df8d9897ca0525bd5fc89e32b0c9477ed73b03
Author: tallison <ta...@apache.org>
AuthorDate: Mon Oct 3 14:24:41 2022 -0400

    TIKA-3869 -- ignore ossindex on databind for now
---
 tika-parent/pom.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/tika-parent/pom.xml b/tika-parent/pom.xml
index 4b2a27034..eacf861a5 100644
--- a/tika-parent/pom.xml
+++ b/tika-parent/pom.xml
@@ -838,6 +838,13 @@
                 <artifactId>h2</artifactId>
                 <version>2.1.214</version>
             </exclude>
+            <!-- I don't think this affects us based on this description: https://nvd.nist.gov/vuln/detail/CVE-2022-42003.
+            A stable release is not yet available to fix this -->
+            <exclude>
+              <groupId>com.fasterxml.jackson.core</groupId>
+              <artifactId>jackson-databind</artifactId>
+              <version>2.13.4</version>
+            </exclude>
           </excludeCoordinates>
           <fail>true</fail>
         </configuration>