Skip to content

Conversation

@mend-for-github-com
Copy link

@mend-for-github-com mend-for-github-com bot commented Aug 4, 2025

This PR contains the following updates:

Package Type Update Change
com.fasterxml.jackson.core:jackson-databind (source) compile minor 2.8.4 -> 2.12.7.1

By merging this PR, the issue #154 will be automatically resolved and closed:

Severity CVSS Score Vulnerability Reachability
Critical Critical 9.8 CVE-2017-7525
Critical Critical 9.8 CVE-2018-19360
Critical Critical 9.8 CVE-2019-10202
Critical Critical 9.8 CVE-2019-14540
Critical Critical 9.8 CVE-2019-14892
Critical Critical 9.8 CVE-2019-16942
Critical Critical 9.8 CVE-2019-16943
Critical Critical 9.8 CVE-2019-17267
Critical Critical 9.8 CVE-2019-20330
Critical Critical 9.8 CVE-2020-8840
Critical Critical 9.8 CVE-2020-9547
Critical Critical 9.8 CVE-2020-9548
High High 8.8 CVE-2020-10672
High High 8.8 CVE-2020-10673
High High 8.8 CVE-2020-10968
High High 8.8 CVE-2020-10969
High High 8.8 CVE-2020-11111
High High 8.8 CVE-2020-11112
High High 8.8 CVE-2020-11113
High High 8.1 CVE-2020-10650
High High 8.1 CVE-2020-11619
High High 8.1 CVE-2020-11620
High High 8.1 CVE-2020-14060
High High 8.1 CVE-2020-14061
High High 8.1 CVE-2020-14062
High High 8.1 CVE-2020-14195
High High 8.1 CVE-2020-24616
High High 8.1 CVE-2020-24750
High High 8.1 CVE-2020-35490
High High 8.1 CVE-2020-35491
High High 8.1 CVE-2020-35728
High High 8.1 CVE-2020-36179
High High 8.1 CVE-2020-36180
High High 8.1 CVE-2020-36181
High High 8.1 CVE-2020-36182
High High 8.1 CVE-2020-36183
High High 8.1 CVE-2020-36184
High High 8.1 CVE-2020-36185
High High 8.1 CVE-2020-36186
High High 8.1 CVE-2020-36187
High High 8.1 CVE-2020-36188
High High 8.1 CVE-2020-36189
High High 8.1 CVE-2021-20190
High High 7.5 CVE-2019-12086
High High 7.5 CVE-2020-25649
High High 7.5 CVE-2022-42003
High High 7.5 CVE-2022-42004
High High 7.5 CVE-2025-52999
High High 7.5 WS-2022-0468
Medium Medium 5.3 WS-2018-0124

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Aug 4, 2025
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-com.fasterxml.jackson.core-jackson-databind-2.x branch from 1b9c58e to e42a608 Compare August 30, 2025 05:01
@mend-for-github-com mend-for-github-com bot changed the title Update dependency com.fasterxml.jackson.core:jackson-databind to v2.9.5 (main) Update dependency com.fasterxml.jackson.core:jackson-databind to v2.12.7.1 (main) Aug 30, 2025
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-com.fasterxml.jackson.core-jackson-databind-2.x branch from e42a608 to e469579 Compare September 13, 2025 00:07
@mend-for-github-com mend-for-github-com bot changed the title Update dependency com.fasterxml.jackson.core:jackson-databind to v2.12.7.1 (main) Update dependency com.fasterxml.jackson.core:jackson-databind to v2.9.5 (main) Sep 13, 2025
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-com.fasterxml.jackson.core-jackson-databind-2.x branch from e469579 to 8e87aa6 Compare October 16, 2025 22:14
@mend-for-github-com mend-for-github-com bot changed the title Update dependency com.fasterxml.jackson.core:jackson-databind to v2.9.5 (main) Update dependency com.fasterxml.jackson.core:jackson-databind to v2.12.7.1 (main) Oct 16, 2025
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-com.fasterxml.jackson.core-jackson-databind-2.x branch from 8e87aa6 to 256600e Compare October 24, 2025 06:30
@mend-for-github-com mend-for-github-com bot changed the title Update dependency com.fasterxml.jackson.core:jackson-databind to v2.12.7.1 (main) Update dependency com.fasterxml.jackson.core:jackson-databind to v2.9.5 (main) Oct 24, 2025
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-com.fasterxml.jackson.core-jackson-databind-2.x branch from 256600e to 761d287 Compare December 21, 2025 03:20
@mend-for-github-com mend-for-github-com bot changed the title Update dependency com.fasterxml.jackson.core:jackson-databind to v2.9.5 (main) Update dependency com.fasterxml.jackson.core:jackson-databind to v2.12.7.1 (main) Dec 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant