From c4f0b09459f928fed8af3d763704de7c50eeed6d Mon Sep 17 00:00:00 2001
From: William Cheng <wing328hk@gmail.com>
Date: Wed, 6 Nov 2019 10:27:08 +0800
Subject: [PATCH] Fix Jackson databind security issue (#4370)

* fix jackson databind security issue

* update groovy sample

* fix groovy dep version
---
 .../src/main/resources/Groovy/build.gradle.mustache            | 3 ++-
 .../src/main/resources/Java/build.gradle.mustache              | 2 +-
 .../Java/libraries/google-api-client/build.gradle.mustache     | 2 +-
 .../Java/libraries/google-api-client/build.sbt.mustache        | 2 +-
 .../resources/Java/libraries/google-api-client/pom.mustache    | 2 +-
 .../resources/Java/libraries/jersey2/build.gradle.mustache     | 2 +-
 .../main/resources/Java/libraries/jersey2/build.sbt.mustache   | 2 +-
 .../src/main/resources/Java/libraries/jersey2/pom.mustache     | 2 +-
 .../resources/Java/libraries/resteasy/build.gradle.mustache    | 2 +-
 .../main/resources/Java/libraries/resteasy/build.sbt.mustache  | 2 +-
 .../src/main/resources/Java/libraries/resteasy/pom.mustache    | 2 +-
 .../Java/libraries/resttemplate/build.gradle.mustache          | 2 +-
 .../main/resources/Java/libraries/resttemplate/pom.mustache    | 2 +-
 .../resources/Java/libraries/retrofit2/build.gradle.mustache   | 2 +-
 .../main/resources/Java/libraries/retrofit2/build.sbt.mustache | 2 +-
 .../src/main/resources/Java/libraries/retrofit2/pom.mustache   | 2 +-
 .../main/resources/Java/libraries/vertx/build.gradle.mustache  | 2 +-
 .../src/main/resources/Java/libraries/vertx/pom.mustache       | 2 +-
 .../src/main/resources/java-undertow-server/pom.mustache       | 2 +-
 samples/client/petstore/groovy/build.gradle                    | 3 ++-
 samples/client/petstore/java/google-api-client/build.gradle    | 2 +-
 samples/client/petstore/java/google-api-client/build.sbt       | 2 +-
 samples/client/petstore/java/google-api-client/pom.xml         | 2 +-
 samples/client/petstore/java/jersey1/build.gradle              | 2 +-
 samples/client/petstore/java/jersey2-java6/build.sbt           | 2 +-
 samples/client/petstore/java/jersey2-java6/pom.xml             | 2 +-
 samples/client/petstore/java/jersey2-java8/build.gradle        | 2 +-
 samples/client/petstore/java/jersey2-java8/build.sbt           | 2 +-
 samples/client/petstore/java/jersey2-java8/pom.xml             | 2 +-
 samples/client/petstore/java/jersey2/build.gradle              | 2 +-
 samples/client/petstore/java/jersey2/build.sbt                 | 2 +-
 samples/client/petstore/java/jersey2/pom.xml                   | 2 +-
 samples/client/petstore/java/resteasy/build.gradle             | 2 +-
 samples/client/petstore/java/resteasy/build.sbt                | 2 +-
 samples/client/petstore/java/resteasy/pom.xml                  | 2 +-
 samples/client/petstore/java/resttemplate-withXml/build.gradle | 2 +-
 samples/client/petstore/java/resttemplate-withXml/pom.xml      | 2 +-
 samples/client/petstore/java/resttemplate/build.gradle         | 2 +-
 samples/client/petstore/java/resttemplate/pom.xml              | 2 +-
 samples/client/petstore/java/retrofit2-play24/pom.xml          | 2 +-
 samples/client/petstore/java/retrofit2-play25/build.sbt        | 2 +-
 samples/client/petstore/java/retrofit2-play25/pom.xml          | 2 +-
 samples/client/petstore/java/retrofit2-play26/build.gradle     | 2 +-
 samples/client/petstore/java/retrofit2-play26/pom.xml          | 2 +-
 samples/client/petstore/java/vertx/build.gradle                | 2 +-
 samples/client/petstore/java/vertx/pom.xml                     | 2 +-
 samples/client/petstore/java/webclient/build.gradle            | 2 +-
 47 files changed, 49 insertions(+), 47 deletions(-)

diff --git a/modules/openapi-generator/src/main/resources/Groovy/build.gradle.mustache b/modules/openapi-generator/src/main/resources/Groovy/build.gradle.mustache
index a5733e22fba..5fb59119977 100644
--- a/modules/openapi-generator/src/main/resources/Groovy/build.gradle.mustache
+++ b/modules/openapi-generator/src/main/resources/Groovy/build.gradle.mustache
@@ -28,6 +28,7 @@ repositories {
 ext {
     swagger_annotations_version = "1.5.22"
     jackson_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
 }
 
 dependencies {
@@ -35,7 +36,7 @@ dependencies {
     compile "io.swagger:swagger-annotations:$swagger_annotations_version"
     compile "com.fasterxml.jackson.core:jackson-core:$jackson_version"
     compile "com.fasterxml.jackson.core:jackson-annotations:$jackson_version"
-    compile "com.fasterxml.jackson.core:jackson-databind:$jackson_version"
+    compile "com.fasterxml.jackson.core:jackson-databind:$jackson_databind_version"
     compile "com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider:$jackson_version"
     compile "com.fasterxml.jackson.datatype:jackson-datatype-joda:$jackson_version"
     compile 'io.github.http-builder-ng:http-builder-ng-core:1.0.3'
diff --git a/modules/openapi-generator/src/main/resources/Java/build.gradle.mustache b/modules/openapi-generator/src/main/resources/Java/build.gradle.mustache
index 2fa65868357..47059d550b1 100644
--- a/modules/openapi-generator/src/main/resources/Java/build.gradle.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/build.gradle.mustache
@@ -137,7 +137,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
     swagger_annotations_version = "1.5.22"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     jackson_databind_nullable_version = "0.2.0"
     jersey_version = "1.19.4"
     jodatime_version = "2.9.9"
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/build.gradle.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/build.gradle.mustache
index 9c8d7a8d30e..57deb75c560 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/build.gradle.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/build.gradle.mustache
@@ -121,7 +121,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
     swagger_annotations_version = "1.5.22"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     jackson_databind_nullable_version = "0.2.0"
     google_api_client_version = "1.23.0"
     jersey_common_version = "2.25.1"
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/build.sbt.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/build.sbt.mustache
index 2c1ff450e94..2af4dd8dfdb 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/build.sbt.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/build.sbt.mustache
@@ -14,7 +14,7 @@ lazy val root = (project in file(".")).
       "org.glassfish.jersey.core" % "jersey-common" % "2.25.1",
       "com.fasterxml.jackson.core" % "jackson-core" % "2.9.10" % "compile",
       "com.fasterxml.jackson.core" % "jackson-annotations" % "2.9.10" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10.1" % "compile",
       {{#withXml}}
       "com.fasterxml.jackson.dataformat" % "jackson-dataformat-xml" % "2.9.10" % "compile",
       {{/withXml}}
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/pom.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/pom.mustache
index 7be1da91a4e..89f8be6132c 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/google-api-client/pom.mustache
@@ -307,7 +307,7 @@
         <google-api-client-version>1.30.2</google-api-client-version>
         <jersey-common-version>2.25.1</jersey-common-version>
         <jackson-version>2.9.10</jackson-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
         {{#joda}}
         <jodatime-version>2.9.9</jodatime-version>
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/build.gradle.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/build.gradle.mustache
index ec3b383eea0..998d6ebc8b4 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/build.gradle.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/build.gradle.mustache
@@ -120,7 +120,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
     swagger_annotations_version = "1.5.22"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     jackson_databind_nullable_version = "0.2.0"
     {{#supportJava6}}
     jersey_version = "2.6"
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/build.sbt.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/build.sbt.mustache
index e31be933919..61f8e283787 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/build.sbt.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/build.sbt.mustache
@@ -15,7 +15,7 @@ lazy val root = (project in file(".")).
       "org.glassfish.jersey.media" % "jersey-media-json-jackson" % {{#supportJava6}}"2.6"{{/supportJava6}}{{^supportJava6}}"2.25.1"{{/supportJava6}},
       "com.fasterxml.jackson.core" % "jackson-core" % "2.9.10" % "compile",
       "com.fasterxml.jackson.core" % "jackson-annotations" % "2.9.10" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10.1" % "compile",
       {{#joda}}
       "com.fasterxml.jackson.datatype" % "jackson-datatype-joda" % "2.9.10" % "compile",
       {{/joda}}
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/pom.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/pom.mustache
index 31a1843080e..5a108ed6ee4 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/jersey2/pom.mustache
@@ -361,7 +361,7 @@
         <commons_lang3_version>3.6</commons_lang3_version>
         {{/supportJava6}}
         <jackson-version>2.9.10</jackson-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
         {{#threetenbp}}
         <threetenbp-version>2.9.10</threetenbp-version>
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/build.gradle.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/build.gradle.mustache
index e45659de524..bf9f5408c2a 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/build.gradle.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/build.gradle.mustache
@@ -120,7 +120,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
     swagger_annotations_version = "1.5.22"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     jackson_databind_nullable_version = "0.2.0"
     threetenbp_version = "2.9.10"
     resteasy_version = "3.1.3.Final"
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/build.sbt.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/build.sbt.mustache
index bcedcaec343..95ab58d1f9d 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/build.sbt.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/build.sbt.mustache
@@ -15,7 +15,7 @@ lazy val root = (project in file(".")).
       "org.jboss.resteasy" % "resteasy-jackson2-provider" % "3.1.3.Final" % "compile",
       "com.fasterxml.jackson.core" % "jackson-core" % "2.9.10" % "compile",
       "com.fasterxml.jackson.core" % "jackson-annotations" % "2.9.10" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10.1" % "compile",
       "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.9.10" % "compile",
       {{#java8}}
       "com.fasterxml.jackson.datatype" % "jackson-datatype-jsr310" % "2.9.10" % "compile",
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/pom.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/pom.mustache
index 1a12889b965..16a1a3fe1fa 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/resteasy/pom.mustache
@@ -295,7 +295,7 @@
         <swagger-annotations-version>1.5.22</swagger-annotations-version>
         <resteasy-version>3.1.3.Final</resteasy-version>
         <jackson-version>2.9.10</jackson-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
         <threetenbp-version>2.9.10</threetenbp-version>
         {{^java8}}
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/resttemplate/build.gradle.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/resttemplate/build.gradle.mustache
index 7601a8180d1..1c631f1a557 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/resttemplate/build.gradle.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/resttemplate/build.gradle.mustache
@@ -121,7 +121,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
     swagger_annotations_version = "1.5.22"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     jackson_databind_nullable_version = "0.2.0"
     spring_web_version = "4.3.9.RELEASE"
     jodatime_version = "2.9.9"
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/resttemplate/pom.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/resttemplate/pom.mustache
index a717eb44127..eb3ddfb12f9 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/resttemplate/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/resttemplate/pom.mustache
@@ -310,7 +310,7 @@
         <swagger-annotations-version>1.5.22</swagger-annotations-version>
         <spring-web-version>4.3.9.RELEASE</spring-web-version>
         <jackson-version>2.9.10</jackson-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
         {{#joda}}
         <jodatime-version>2.9.9</jodatime-version>
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/build.gradle.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/build.gradle.mustache
index e7f778ba5a0..ddeb061cd02 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/build.gradle.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/build.gradle.mustache
@@ -132,7 +132,7 @@ ext {
     {{/play25}}
     {{#play26}}
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     jackson_databind_nullable_version = "0.2.0"
     play_version = "2.6.7"
     {{/play26}}
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/build.sbt.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/build.sbt.mustache
index c6fc88aa0aa..ecae66c6a85 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/build.sbt.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/build.sbt.mustache
@@ -25,7 +25,7 @@ lazy val root = (project in file(".")).
       "com.typesafe.play" % "play-java-ws_2.11" % "2.5.15" % "compile",
       "com.fasterxml.jackson.core" % "jackson-core" % "2.9.10" % "compile",
       "com.fasterxml.jackson.core" % "jackson-annotations" % "2.9.10" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10.1" % "compile",
       {{/play25}}
       {{#play26}}
       "com.typesafe.play" % "play-ahc-ws_2.12" % "2.6.7" % "compile",
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/pom.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/pom.mustache
index d32445d02f1..428e4203763 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/retrofit2/pom.mustache
@@ -375,7 +375,7 @@
         <gson-fire-version>1.8.3</gson-fire-version>
         <swagger-annotations-version>1.5.22</swagger-annotations-version>
         {{#usePlayWS}}
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
         {{#play24}}
         <jackson-version>2.6.6</jackson-version>
         <play-version>2.4.11</play-version>
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/vertx/build.gradle.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/vertx/build.gradle.mustache
index 68dce22f06a..862aee9f785 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/vertx/build.gradle.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/vertx/build.gradle.mustache
@@ -29,7 +29,7 @@ task execute(type:JavaExec) {
 ext {
     swagger_annotations_version = "1.5.21"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     vertx_version = "3.4.2"
     junit_version = "4.12"
 }
diff --git a/modules/openapi-generator/src/main/resources/Java/libraries/vertx/pom.mustache b/modules/openapi-generator/src/main/resources/Java/libraries/vertx/pom.mustache
index df558861387..cdbb87d1800 100644
--- a/modules/openapi-generator/src/main/resources/Java/libraries/vertx/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/Java/libraries/vertx/pom.mustache
@@ -290,7 +290,7 @@
         <vertx-version>3.4.2</vertx-version>
         <swagger-annotations-version>1.5.22</swagger-annotations-version>
         <jackson-version>2.9.10</jackson-version>
-        <jackson-databind>2.9.10</jackson-databind>
+        <jackson-databind>2.9.10.1</jackson-databind>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
         <junit-version>4.12</junit-version>
     </properties>
diff --git a/modules/openapi-generator/src/main/resources/java-undertow-server/pom.mustache b/modules/openapi-generator/src/main/resources/java-undertow-server/pom.mustache
index d11a2ce7c89..575b55d6e57 100644
--- a/modules/openapi-generator/src/main/resources/java-undertow-server/pom.mustache
+++ b/modules/openapi-generator/src/main/resources/java-undertow-server/pom.mustache
@@ -17,7 +17,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <version.framework>0.1.1</version.framework>
         <version.jackson>2.9.10</version.jackson>
-        <version.jackson.databind>2.9.10</version.jackson.databind>
+        <version.jackson.databind>2.9.10.1</version.jackson.databind>
         <version.slf4j>1.7.21</version.slf4j>
         <version.jose4j>0.5.2</version.jose4j>
         <version.antlr4>4.5.3</version.antlr4>
diff --git a/samples/client/petstore/groovy/build.gradle b/samples/client/petstore/groovy/build.gradle
index baf222ae11c..884cb75a2ba 100644
--- a/samples/client/petstore/groovy/build.gradle
+++ b/samples/client/petstore/groovy/build.gradle
@@ -28,6 +28,7 @@ repositories {
 ext {
     swagger_annotations_version = "1.5.22"
     jackson_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
 }
 
 dependencies {
@@ -35,7 +36,7 @@ dependencies {
     compile "io.swagger:swagger-annotations:$swagger_annotations_version"
     compile "com.fasterxml.jackson.core:jackson-core:$jackson_version"
     compile "com.fasterxml.jackson.core:jackson-annotations:$jackson_version"
-    compile "com.fasterxml.jackson.core:jackson-databind:$jackson_version"
+    compile "com.fasterxml.jackson.core:jackson-databind:$jackson_databind_version"
     compile "com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider:$jackson_version"
     compile "com.fasterxml.jackson.datatype:jackson-datatype-joda:$jackson_version"
     compile 'io.github.http-builder-ng:http-builder-ng-core:1.0.3'
diff --git a/samples/client/petstore/java/google-api-client/build.gradle b/samples/client/petstore/java/google-api-client/build.gradle
index b321101fa13..a84e8f60020 100644
--- a/samples/client/petstore/java/google-api-client/build.gradle
+++ b/samples/client/petstore/java/google-api-client/build.gradle
@@ -97,7 +97,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
     swagger_annotations_version = "1.5.22"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     jackson_databind_nullable_version = "0.2.0"
     google_api_client_version = "1.23.0"
     jersey_common_version = "2.25.1"
diff --git a/samples/client/petstore/java/google-api-client/build.sbt b/samples/client/petstore/java/google-api-client/build.sbt
index 6997a7b4aa4..010aeb2783d 100644
--- a/samples/client/petstore/java/google-api-client/build.sbt
+++ b/samples/client/petstore/java/google-api-client/build.sbt
@@ -14,7 +14,7 @@ lazy val root = (project in file(".")).
       "org.glassfish.jersey.core" % "jersey-common" % "2.25.1",
       "com.fasterxml.jackson.core" % "jackson-core" % "2.9.10" % "compile",
       "com.fasterxml.jackson.core" % "jackson-annotations" % "2.9.10" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10.1" % "compile",
       "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.9.10" % "compile",
       "junit" % "junit" % "4.12" % "test",
       "com.novocode" % "junit-interface" % "0.10" % "test"
diff --git a/samples/client/petstore/java/google-api-client/pom.xml b/samples/client/petstore/java/google-api-client/pom.xml
index 593b8d20ffc..e99897809e8 100644
--- a/samples/client/petstore/java/google-api-client/pom.xml
+++ b/samples/client/petstore/java/google-api-client/pom.xml
@@ -259,7 +259,7 @@
         <google-api-client-version>1.30.2</google-api-client-version>
         <jersey-common-version>2.25.1</jersey-common-version>
         <jackson-version>2.9.10</jackson-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
         <jackson-threetenbp-version>2.9.10</jackson-threetenbp-version>
         <maven-plugin-version>1.0.0</maven-plugin-version>
diff --git a/samples/client/petstore/java/jersey1/build.gradle b/samples/client/petstore/java/jersey1/build.gradle
index c915acb96a6..2c4a3af46cb 100644
--- a/samples/client/petstore/java/jersey1/build.gradle
+++ b/samples/client/petstore/java/jersey1/build.gradle
@@ -113,7 +113,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
     swagger_annotations_version = "1.5.22"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     jackson_databind_nullable_version = "0.2.0"
     jersey_version = "1.19.4"
     jodatime_version = "2.9.9"
diff --git a/samples/client/petstore/java/jersey2-java6/build.sbt b/samples/client/petstore/java/jersey2-java6/build.sbt
index c79af88c587..3bb20e3d1b5 100644
--- a/samples/client/petstore/java/jersey2-java6/build.sbt
+++ b/samples/client/petstore/java/jersey2-java6/build.sbt
@@ -15,7 +15,7 @@ lazy val root = (project in file(".")).
       "org.glassfish.jersey.media" % "jersey-media-json-jackson" % "2.6",
       "com.fasterxml.jackson.core" % "jackson-core" % "2.9.10" % "compile",
       "com.fasterxml.jackson.core" % "jackson-annotations" % "2.9.10" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10.1" % "compile",
       "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.9.10" % "compile",
       "com.brsanthu" % "migbase64" % "2.2",
       "org.apache.commons" % "commons-lang3" % "3.6",
diff --git a/samples/client/petstore/java/jersey2-java6/pom.xml b/samples/client/petstore/java/jersey2-java6/pom.xml
index 19754477d9d..70150988b35 100644
--- a/samples/client/petstore/java/jersey2-java6/pom.xml
+++ b/samples/client/petstore/java/jersey2-java6/pom.xml
@@ -291,7 +291,7 @@
         <commons_io_version>2.5</commons_io_version>
         <commons_lang3_version>3.6</commons_lang3_version>
         <jackson-version>2.9.10</jackson-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
         <threetenbp-version>2.9.10</threetenbp-version>
         <maven-plugin-version>1.0.0</maven-plugin-version>
diff --git a/samples/client/petstore/java/jersey2-java8/build.gradle b/samples/client/petstore/java/jersey2-java8/build.gradle
index 646b451a543..1c2b2d6f336 100644
--- a/samples/client/petstore/java/jersey2-java8/build.gradle
+++ b/samples/client/petstore/java/jersey2-java8/build.gradle
@@ -96,7 +96,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
     swagger_annotations_version = "1.5.22"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     jackson_databind_nullable_version = "0.2.0"
     jersey_version = "2.27"
     junit_version = "4.12"
diff --git a/samples/client/petstore/java/jersey2-java8/build.sbt b/samples/client/petstore/java/jersey2-java8/build.sbt
index b07ce9ccc08..d4c35713aef 100644
--- a/samples/client/petstore/java/jersey2-java8/build.sbt
+++ b/samples/client/petstore/java/jersey2-java8/build.sbt
@@ -15,7 +15,7 @@ lazy val root = (project in file(".")).
       "org.glassfish.jersey.media" % "jersey-media-json-jackson" % "2.25.1",
       "com.fasterxml.jackson.core" % "jackson-core" % "2.9.10" % "compile",
       "com.fasterxml.jackson.core" % "jackson-annotations" % "2.9.10" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10.1" % "compile",
       "com.fasterxml.jackson.datatype" % "jackson-datatype-jsr310" % "2.9.10" % "compile",
       "junit" % "junit" % "4.12" % "test",
       "com.novocode" % "junit-interface" % "0.10" % "test"
diff --git a/samples/client/petstore/java/jersey2-java8/pom.xml b/samples/client/petstore/java/jersey2-java8/pom.xml
index b81f6e210a3..475b490728e 100644
--- a/samples/client/petstore/java/jersey2-java8/pom.xml
+++ b/samples/client/petstore/java/jersey2-java8/pom.xml
@@ -278,7 +278,7 @@
         <swagger-annotations-version>1.5.22</swagger-annotations-version>
         <jersey-version>2.27</jersey-version>
         <jackson-version>2.9.10</jackson-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
         <maven-plugin-version>1.0.0</maven-plugin-version>
         <junit-version>4.12</junit-version>
diff --git a/samples/client/petstore/java/jersey2/build.gradle b/samples/client/petstore/java/jersey2/build.gradle
index d46e3b0a8b1..ac168318d96 100644
--- a/samples/client/petstore/java/jersey2/build.gradle
+++ b/samples/client/petstore/java/jersey2/build.gradle
@@ -96,7 +96,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
     swagger_annotations_version = "1.5.22"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     jackson_databind_nullable_version = "0.2.0"
     jersey_version = "2.27"
     junit_version = "4.12"
diff --git a/samples/client/petstore/java/jersey2/build.sbt b/samples/client/petstore/java/jersey2/build.sbt
index 20b9bf85680..88c2bdfba5c 100644
--- a/samples/client/petstore/java/jersey2/build.sbt
+++ b/samples/client/petstore/java/jersey2/build.sbt
@@ -15,7 +15,7 @@ lazy val root = (project in file(".")).
       "org.glassfish.jersey.media" % "jersey-media-json-jackson" % "2.25.1",
       "com.fasterxml.jackson.core" % "jackson-core" % "2.9.10" % "compile",
       "com.fasterxml.jackson.core" % "jackson-annotations" % "2.9.10" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10.1" % "compile",
       "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.9.10" % "compile",
       "com.brsanthu" % "migbase64" % "2.2",
       "junit" % "junit" % "4.12" % "test",
diff --git a/samples/client/petstore/java/jersey2/pom.xml b/samples/client/petstore/java/jersey2/pom.xml
index 6770d11afa6..6e341a40e8f 100644
--- a/samples/client/petstore/java/jersey2/pom.xml
+++ b/samples/client/petstore/java/jersey2/pom.xml
@@ -284,7 +284,7 @@
         <swagger-annotations-version>1.5.22</swagger-annotations-version>
         <jersey-version>2.27</jersey-version>
         <jackson-version>2.9.10</jackson-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
         <threetenbp-version>2.9.10</threetenbp-version>
         <maven-plugin-version>1.0.0</maven-plugin-version>
diff --git a/samples/client/petstore/java/resteasy/build.gradle b/samples/client/petstore/java/resteasy/build.gradle
index 88807867992..bd2a69eafa2 100644
--- a/samples/client/petstore/java/resteasy/build.gradle
+++ b/samples/client/petstore/java/resteasy/build.gradle
@@ -96,7 +96,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
     swagger_annotations_version = "1.5.22"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     jackson_databind_nullable_version = "0.2.0"
     threetenbp_version = "2.9.10"
     resteasy_version = "3.1.3.Final"
diff --git a/samples/client/petstore/java/resteasy/build.sbt b/samples/client/petstore/java/resteasy/build.sbt
index 970818ece93..b94b8b1e7e3 100644
--- a/samples/client/petstore/java/resteasy/build.sbt
+++ b/samples/client/petstore/java/resteasy/build.sbt
@@ -15,7 +15,7 @@ lazy val root = (project in file(".")).
       "org.jboss.resteasy" % "resteasy-jackson2-provider" % "3.1.3.Final" % "compile",
       "com.fasterxml.jackson.core" % "jackson-core" % "2.9.10" % "compile",
       "com.fasterxml.jackson.core" % "jackson-annotations" % "2.9.10" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10.1" % "compile",
       "com.github.joschi.jackson" % "jackson-datatype-threetenbp" % "2.9.10" % "compile",
       "com.fasterxml.jackson.datatype" % "jackson-datatype-joda" % "2.9.10" % "compile",
       "joda-time" % "joda-time" % "2.9.9" % "compile",
diff --git a/samples/client/petstore/java/resteasy/pom.xml b/samples/client/petstore/java/resteasy/pom.xml
index eae70733feb..1051701e860 100644
--- a/samples/client/petstore/java/resteasy/pom.xml
+++ b/samples/client/petstore/java/resteasy/pom.xml
@@ -244,7 +244,7 @@
         <swagger-annotations-version>1.5.22</swagger-annotations-version>
         <resteasy-version>3.1.3.Final</resteasy-version>
         <jackson-version>2.9.10</jackson-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
         <threetenbp-version>2.9.10</threetenbp-version>
         <jodatime-version>2.9.9</jodatime-version>
diff --git a/samples/client/petstore/java/resttemplate-withXml/build.gradle b/samples/client/petstore/java/resttemplate-withXml/build.gradle
index bf15581bd7a..b857b47737b 100644
--- a/samples/client/petstore/java/resttemplate-withXml/build.gradle
+++ b/samples/client/petstore/java/resttemplate-withXml/build.gradle
@@ -97,7 +97,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
     swagger_annotations_version = "1.5.22"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     jackson_databind_nullable_version = "0.2.0"
     spring_web_version = "4.3.9.RELEASE"
     jodatime_version = "2.9.9"
diff --git a/samples/client/petstore/java/resttemplate-withXml/pom.xml b/samples/client/petstore/java/resttemplate-withXml/pom.xml
index f1a9c461118..f498ec40eeb 100644
--- a/samples/client/petstore/java/resttemplate-withXml/pom.xml
+++ b/samples/client/petstore/java/resttemplate-withXml/pom.xml
@@ -268,7 +268,7 @@
         <swagger-annotations-version>1.5.22</swagger-annotations-version>
         <spring-web-version>4.3.9.RELEASE</spring-web-version>
         <jackson-version>2.9.10</jackson-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
         <jackson-threetenbp-version>2.9.10</jackson-threetenbp-version>
         <maven-plugin-version>1.0.0</maven-plugin-version>
diff --git a/samples/client/petstore/java/resttemplate/build.gradle b/samples/client/petstore/java/resttemplate/build.gradle
index 183613ceea3..848d01a1a12 100644
--- a/samples/client/petstore/java/resttemplate/build.gradle
+++ b/samples/client/petstore/java/resttemplate/build.gradle
@@ -97,7 +97,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
     swagger_annotations_version = "1.5.22"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     jackson_databind_nullable_version = "0.2.0"
     spring_web_version = "4.3.9.RELEASE"
     jodatime_version = "2.9.9"
diff --git a/samples/client/petstore/java/resttemplate/pom.xml b/samples/client/petstore/java/resttemplate/pom.xml
index db01327bc5a..ac33a8e2360 100644
--- a/samples/client/petstore/java/resttemplate/pom.xml
+++ b/samples/client/petstore/java/resttemplate/pom.xml
@@ -260,7 +260,7 @@
         <swagger-annotations-version>1.5.22</swagger-annotations-version>
         <spring-web-version>4.3.9.RELEASE</spring-web-version>
         <jackson-version>2.9.10</jackson-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
         <jackson-threetenbp-version>2.9.10</jackson-threetenbp-version>
         <maven-plugin-version>1.0.0</maven-plugin-version>
diff --git a/samples/client/petstore/java/retrofit2-play24/pom.xml b/samples/client/petstore/java/retrofit2-play24/pom.xml
index 329612aa192..6ba692a3eb6 100644
--- a/samples/client/petstore/java/retrofit2-play24/pom.xml
+++ b/samples/client/petstore/java/retrofit2-play24/pom.xml
@@ -279,7 +279,7 @@
         <maven.compiler.target>${java.version}</maven.compiler.target>
         <gson-fire-version>1.8.3</gson-fire-version>
         <swagger-annotations-version>1.5.22</swagger-annotations-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
         <jackson-version>2.6.6</jackson-version>
         <play-version>2.4.11</play-version>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
diff --git a/samples/client/petstore/java/retrofit2-play25/build.sbt b/samples/client/petstore/java/retrofit2-play25/build.sbt
index 46cbd0af51a..fe180418e7d 100644
--- a/samples/client/petstore/java/retrofit2-play25/build.sbt
+++ b/samples/client/petstore/java/retrofit2-play25/build.sbt
@@ -14,7 +14,7 @@ lazy val root = (project in file(".")).
       "com.typesafe.play" % "play-java-ws_2.11" % "2.5.15" % "compile",
       "com.fasterxml.jackson.core" % "jackson-core" % "2.9.10" % "compile",
       "com.fasterxml.jackson.core" % "jackson-annotations" % "2.9.10" % "compile",
-      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10" % "compile",
+      "com.fasterxml.jackson.core" % "jackson-databind" % "2.9.10.1" % "compile",
       "com.squareup.retrofit2" % "converter-jackson" % "2.3.0" % "compile",
       "io.swagger" % "swagger-annotations" % "1.5.21" % "compile",
       "org.apache.oltu.oauth2" % "org.apache.oltu.oauth2.client" % "1.0.1" % "compile",
diff --git a/samples/client/petstore/java/retrofit2-play25/pom.xml b/samples/client/petstore/java/retrofit2-play25/pom.xml
index c78aec11c65..5b16aa6a53f 100644
--- a/samples/client/petstore/java/retrofit2-play25/pom.xml
+++ b/samples/client/petstore/java/retrofit2-play25/pom.xml
@@ -284,7 +284,7 @@
         <maven.compiler.target>${java.version}</maven.compiler.target>
         <gson-fire-version>1.8.3</gson-fire-version>
         <swagger-annotations-version>1.5.22</swagger-annotations-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
         <jackson-version>2.9.10</jackson-version>
         <play-version>2.5.15</play-version>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
diff --git a/samples/client/petstore/java/retrofit2-play26/build.gradle b/samples/client/petstore/java/retrofit2-play26/build.gradle
index 179857ed9f0..541c3fa8032 100644
--- a/samples/client/petstore/java/retrofit2-play26/build.gradle
+++ b/samples/client/petstore/java/retrofit2-play26/build.gradle
@@ -98,7 +98,7 @@ ext {
     oltu_version = "1.0.1"
     retrofit_version = "2.3.0"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     jackson_databind_nullable_version = "0.2.0"
     play_version = "2.6.7"
     swagger_annotations_version = "1.5.22"
diff --git a/samples/client/petstore/java/retrofit2-play26/pom.xml b/samples/client/petstore/java/retrofit2-play26/pom.xml
index bd49c056813..a5dbd177064 100644
--- a/samples/client/petstore/java/retrofit2-play26/pom.xml
+++ b/samples/client/petstore/java/retrofit2-play26/pom.xml
@@ -289,7 +289,7 @@
         <maven.compiler.target>${java.version}</maven.compiler.target>
         <gson-fire-version>1.8.3</gson-fire-version>
         <swagger-annotations-version>1.5.22</swagger-annotations-version>
-        <jackson-databind-version>2.9.10</jackson-databind-version>
+        <jackson-databind-version>2.9.10.1</jackson-databind-version>
         <jackson-version>2.9.10</jackson-version>
         <play-version>2.6.7</play-version>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
diff --git a/samples/client/petstore/java/vertx/build.gradle b/samples/client/petstore/java/vertx/build.gradle
index 1d51eb1193c..379110a5241 100644
--- a/samples/client/petstore/java/vertx/build.gradle
+++ b/samples/client/petstore/java/vertx/build.gradle
@@ -29,7 +29,7 @@ task execute(type:JavaExec) {
 ext {
     swagger_annotations_version = "1.5.21"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     vertx_version = "3.4.2"
     junit_version = "4.12"
 }
diff --git a/samples/client/petstore/java/vertx/pom.xml b/samples/client/petstore/java/vertx/pom.xml
index 54e985acc85..d7e3842ebc5 100644
--- a/samples/client/petstore/java/vertx/pom.xml
+++ b/samples/client/petstore/java/vertx/pom.xml
@@ -267,7 +267,7 @@
         <vertx-version>3.4.2</vertx-version>
         <swagger-annotations-version>1.5.22</swagger-annotations-version>
         <jackson-version>2.9.10</jackson-version>
-        <jackson-databind>2.9.10</jackson-databind>
+        <jackson-databind>2.9.10.1</jackson-databind>
         <jackson-databind-nullable-version>0.2.0</jackson-databind-nullable-version>
         <junit-version>4.12</junit-version>
     </properties>
diff --git a/samples/client/petstore/java/webclient/build.gradle b/samples/client/petstore/java/webclient/build.gradle
index 69b9c9a948c..dc82478f47a 100644
--- a/samples/client/petstore/java/webclient/build.gradle
+++ b/samples/client/petstore/java/webclient/build.gradle
@@ -113,7 +113,7 @@ if(hasProperty('target') && target == 'android') {
 ext {
     swagger_annotations_version = "1.5.22"
     jackson_version = "2.9.10"
-    jackson_databind_version = "2.9.10"
+    jackson_databind_version = "2.9.10.1"
     jackson_databind_nullable_version = "0.2.0"
     jersey_version = "1.19.4"
     jodatime_version = "2.9.9"