docx4j
docx4j copied to clipboard
fix(sec): upgrade jackson-databind to 2.12.6.1
What happened?
There are 1 security vulnerabilities found in xerces:xercesImpl 2.12.0
What did I do?
Upgrade xerces:xercesImpl from 2.12.0 to 2.12.1 for vulnerability fix
What did you expect to happen?
Ideally, no insecure libs should be used.
How was this patch tested?
Run mvn compile
succeeded locally.
Run mvn clean test
succeeded locally. all tests passed.
The specification of the pull request
PR Specification from OSCS
current docx4j uses xerces 2.12.2