Uploaded image for project: 'JOC - JS7 Operations Center'
  1. JOC - JS7 Operations Center
  2. JOC-2289

Upgrade jackson-databind to version 2.22.2 due to 3rd party vulnerabilities CVE-2026-19032 and CVE-2026-68497

    XMLWordPrintable

Details

    • Fix
    • Status: Released (View Workflow)
    • Minor
    • Resolution: Fixed
    • 2.9.0, 2.7.8, 2.8.4
    • 2.7.9, 2.8.5, 2.9.1
    • None
    • None
    • CVE-2026-19032, CVE-2026-68497

    Description

      Current Situation

      Currently JS7 ships with 3rd party library jackson-databind 2.22.1 which is affected by vulnerabilities.

      Desired Behavior

      JS7 should use jackson-databind version 2.22.2 where these vulnerabilities are fixed.

      Attachments

        Activity

          People

            sp Santiago Aucejo Petzoldt
            sp Santiago Aucejo Petzoldt
            Rajrani Upadhyay Rajrani Upadhyay
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: