From 93d43d096110118f118fed4ff04700ff8b1a0c8a Mon Sep 17 00:00:00 2001 From: lsocha Date: Fri, 13 Nov 2026 12:38:38 +0100 Subject: [PATCH] fix: Bump Jackson libraries to 2.22.4 to fix CVE (SDK-7030) --- README.md | 12 ++++++------ build.gradle | 6 +++--- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/README.md b/README.md index ba30ccb59..a2656f878 100644 --- a/README.md +++ b/README.md @@ -281,14 +281,14 @@ The Java SDK uses third-party libraries that are required for usage. Their licen 9. [kotlin-stdlib-common v1.6.20](https://mvnrepository.com/artifact/org.jetbrains.kotlin/kotlin-stdlib-common/1.6.20) Maven: `org.jetbrains.kotlin:kotlin-stdlib-common:1.6.20` Licence: [Apache 2.0](https://www.apache.org/licenses/LICENSE-2.0) -10. [jackson-annotations v2.21](https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-annotations/2.21) - Maven: `com.fasterxml.jackson.core:jackson-annotations:2.21` +10. [jackson-annotations v2.22](https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-annotations/2.22) + Maven: `com.fasterxml.jackson.core:jackson-annotations:2.22` Licence: [Apache 2.0](https://www.apache.org/licenses/LICENSE-2.0) -11. [jackson-core v2.21.4](https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-core/2.21.4) - Maven: `com.fasterxml.jackson.core:jackson-core:2.21.4` +11. [jackson-core v2.22.4](https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-core/2.22.4) + Maven: `com.fasterxml.jackson.core:jackson-core:2.22.4` Licence: [Apache 2.0](https://www.apache.org/licenses/LICENSE-2.0) -12. [jackson-databind v2.21.4](https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind/2.21.4) - Maven: `com.fasterxml.jackson.core:jackson-databind:2.21.4` +12. [jackson-databind v2.22.4](https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind/2.22.4) + Maven: `com.fasterxml.jackson.core:jackson-databind:2.22.4` Licence: [Apache 2.0](https://www.apache.org/licenses/LICENSE-2.0) 13. [okio v3.5.0](https://mvnrepository.com/artifact/com.squareup.okio/okio/3.5.0) Maven: `com.squareup.okio:okio:3.5.0` diff --git a/build.gradle b/build.gradle index 623036d32..a0219178d 100644 --- a/build.gradle +++ b/build.gradle @@ -52,9 +52,9 @@ configurations { dependencies { implementation "com.eclipsesource.minimal-json:minimal-json:0.9.5" - implementation "com.fasterxml.jackson.core:jackson-annotations:2.21" - implementation "com.fasterxml.jackson.core:jackson-core:2.21.4" - implementation "com.fasterxml.jackson.core:jackson-databind:2.21.4" + implementation "com.fasterxml.jackson.core:jackson-annotations:2.22" + implementation "com.fasterxml.jackson.core:jackson-core:2.22.4" + implementation "com.fasterxml.jackson.core:jackson-databind:2.22.4" implementation "org.bitbucket.b_c:jose4j:0.9.6" implementation "org.bouncycastle:bcprov-jdk18on:1.85" implementation "org.bouncycastle:bcpkix-jdk18on:1.85"