From 84791225616ead48e18e8ba8d9e5c1506f912359 Mon Sep 17 00:00:00 2001
From: Sebastian Stenzel <sebastian.stenzel@gmail.com>
Date: Tue, 8 Dec 2020 08:30:16 +0100
Subject: [PATCH] temp fix for vulnerability in upstream lib [ci skip]

---
 main/pom.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/main/pom.xml b/main/pom.xml
index 5989c3276..77690a641 100644
--- a/main/pom.xml
+++ b/main/pom.xml
@@ -175,6 +175,13 @@
 				<artifactId>java-jwt</artifactId>
 				<version>${jwt.version}</version>
 			</dependency>
+			<!-- fixes CVE-2020-25649, can be removed once https://github.com/auth0/java-jwt/pull/463 is closed and released -->
+			<dependency>
+				<groupId>com.fasterxml.jackson.core</groupId>
+				<artifactId>jackson-databind</artifactId>
+				<version>2.10.5.1</version>
+			</dependency>
+
 
 			<!-- EasyBind -->
 			<dependency>