bump jackson to 2.13.2

Author: frantuma

modules/swagger-codegen/pom.xml

@@ -200,7 +200,7 @@
     </reporting>
     <properties>
         <diffutils-version>1.3.0</diffutils-version>
-        <swagger-codegen-v2-version>2.4.27-SNAPSHOT</swagger-codegen-v2-version>
+        <swagger-codegen-v2-version>2.4.27</swagger-codegen-v2-version>
     </properties>
     <dependencies>
         <dependency>

pom.xml

@@ -1077,7 +1077,7 @@
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-databind</artifactId>
-                <version>${jackson-version}</version>
+                <version>${jackson-databind-version}</version>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
@@ -1180,10 +1180,15 @@
     <properties>
         <swagger-codegen-generators-version>1.0.34-SNAPSHOT</swagger-codegen-generators-version>
         <swagger-core-version>2.1.13</swagger-core-version>
-        <swagger-core-version-v1>1.6.5</swagger-core-version-v1>
+        <swagger-core-version-v1>1.6.6</swagger-core-version-v1>
         <swagger-parser-version>2.0.30</swagger-parser-version>
-        <swagger-parser-version-v1>1.0.57</swagger-parser-version-v1>
-        <jackson-version>2.12.1</jackson-version>
+        <swagger-parser-version-v1>1.0.59</swagger-parser-version-v1>
+        <jackson-version>2.13.2</jackson-version>
+        <!--
+          jackson-databind 2.13.2 is still affected by CVE-2020-36518.
+          This version pin for jackson-databind can be removed when bumping jackson to 2.14
+          -->
+        <jackson-databind-version>2.13.2.2</jackson-databind-version>
         <scala-version>2.11.1</scala-version>
         <felix-version>3.3.0</felix-version>
         <commons-io-version>2.11.0</commons-io-version>