Skip to content

Bump jackson to 2.18.12 for CVE-2026-110879 - #639

Merged
hugohills-regnosys merged 1 commit into
11.x.xfrom
fix/jackson-cve-11.x.x
Oct 21, 2026
Merged

hugohills-regnosys merged 1 commit into
11.x.xfrom
fix/jackson-cve-11.x.x

Conversation

@hugohills-regnosys

Copy link
Copy Markdown
Contributor

Built and tested locally with mvn verify.

Only version/dependency declarations changed (no production code), so no new test is needed.

Type of change

  • Bug fix (non-breaking change which fixes an issue)

🤖 Generated with Claude Code

@hugohills-regnosys

Copy link
Copy Markdown
Contributor Author

Infrastructure - Dependency and CVE Update

What is being released?

This release updates third-party software libraries updated to comply with the "Common Vulnerabilities and Exposures" standard (CVE, https://www.cve.org/).

  • jackson-databind-2.18.12 — CVE-2026-110879 (9.2)

Review Directions

Changes can be reviewed in PR: #639

@hugohills-regnosys
hugohills-regnosys merged commit 9c708ba into 11.x.x Oct 21, 2026
4 checks passed
@hugohills-regnosys
hugohills-regnosys deleted the fix/jackson-cve-11.x.x branch October 21, 2026 09:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants