Uploaded image for project: 'JOC - JS7 Operations Center'
  1. JOC - JS7 Operations Center
  2. JOC-2309

Upgrade jackson-databind 2.20.0 to 2.22.3 due to 3rd party vulnerabilities CVE-2026-89407, CVE-2026-89425, CVE-2026-91777

    XMLWordPrintable

Details

    • Fix
    • Status: Released (View Workflow)
    • Minor
    • Resolution: Fixed
    • 2.9.0, 2.7.8, 2.8.4
    • 2.7.9, 2.8.5, 2.9.1
    • None
    • None
    • CVE-2026-89407, CVE-2026-89425, CVE-2026-91777

    Description

      Current Situation

      Currently JS7 ships with jackson-core lbraries version 2.20.0. This version is hit be three vulnerabilities. 

      Desired Behavior

      JS7 should make use of jackson-core lbraries version 2.22.3 where these issues are fixed.

      Attachments

        Activity

          People

            sp Santiago Aucejo Petzoldt
            sp Santiago Aucejo Petzoldt
            Ajay Kumbhkar Ajay Kumbhkar
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: