Skip to content

fix: upgrade jackson-core to 2.15 #699

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed

Conversation

cgcladeraokta
Copy link
Contributor

Changes

Upgrade com.fasterxml.jackson.core:jackson-core to 2.15.4 to mitigate CWE-400

References

CWE-400

Testing

Please describe how this can be tested by reviewers. Be specific about anything not tested and reasons why. If this library has unit and/or integration testing, tests should be added for new functionality and existing tests should complete without errors.

  • This change adds test coverage
  • This change has been tested on the latest version of Java or why not

Checklist

@cgcladeraokta cgcladeraokta requested a review from a team as a code owner December 11, 2024 14:17
@amorimrafael
Copy link

Excellent, I am looking forward to this update.
I currently use the package for JWT in my app, and the security report flagged the vulnerability CWE-400.

I will keep an eye on it. Do you have a release date for the java-jwt package on Maven?

@tanya732
Copy link
Contributor

Hi @cgcladeraokta

Thank you for the contribution, I have added the commits in PR.

Hence, closing this PR.

Thank you

@tanya732 tanya732 closed this Jan 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants