Merge pull request #394 from gdrossi46/main

[SecurityFix] Updating alibaba fastjson to take care of CVE-2022-25845
StarRocks · Nov 15, 2024 · 18f7f1e · 18f7f1e
2 parents 67b090e + 558a2a1
commit 18f7f1e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pom.xml b/pom.xml
@@ -61,6 +61,7 @@ limitations under the License.
         <scala.binary.version>2.12</scala.binary.version>
         <guava.version>31.1-jre</guava.version>
         <shading.prefix>com.starrocks.shade</shading.prefix>
+        <alibaba-fastjson.version>1.2.83</alibaba-fastjson.version>
     </properties>
 
     <dependencies>
@@ -117,7 +118,7 @@ limitations under the License.
         <dependency>
             <groupId>com.alibaba</groupId>
             <artifactId>fastjson</artifactId>
-            <version>1.2.75</version>
+            <version>${alibaba-fastjson.version}</version>
         </dependency>
         <dependency>
             <groupId>mysql</groupId>