Skip to content

chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.21.7 [security] - #167

Closed
dd-octo-sts[bot] wants to merge 1 commit into
mainfrom
engraver-auto-version-upgrade/renovate/maven-com.fasterxml.jackson.core-jackson-databind-vulnerability
Closed

dd-octo-sts[bot] wants to merge 1 commit into
mainfrom
engraver-auto-version-upgrade/renovate/maven-com.fasterxml.jackson.core-jackson-databind-vulnerability

Conversation

@dd-octo-sts

@dd-octo-sts dd-octo-sts Bot commented Nov 9, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
com.fasterxml.jackson.core:jackson-databind (source) dependencies patch 2.21.4 → 2.21.7

🚨 Security Vulnerability Fix

Severity: HIGH

This PR addresses a detected security vulnerability. Please review and merge promptly.

@mcculls

mcculls commented Nov 12, 2026

Copy link
Copy Markdown
Collaborator

Superseded by #172, which updates com.fasterxml.jackson.core:jackson-databind to 2.23.0, newer than the 2.21.7 proposed here, and updates jackson-core alongside it. The corpus update passed the full build across Java 8, 11, 17, 21, and 25 plus the shared-workload matcher consistency checks.

@mcculls mcculls closed this Nov 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant