From 3b26def6c937b80c66177583844e7aaa82437a30 Mon Sep 17 00:00:00 2001 From: Kostas Oikonomopoulos Date: Thu, 1 Oct 2026 17:29:48 +0300 Subject: [PATCH] Upgrade to Jackson 3.1.7 and Jackson 2.21.7 Upgrades jacksonVersion to 3.1.7 and jackson2Version to 2.21.7 to address CVE-2026-91776 in jackson-databind. Closes gh-51928 --- gradle.properties | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gradle.properties b/gradle.properties index b0e0c446024..60c8c7688bd 100644 --- a/gradle.properties +++ b/gradle.properties @@ -11,8 +11,8 @@ checkstyleToolVersion=10.12.4 commonsCodecVersion=1.22.1 graalVersion=25 hamcrestVersion=3.0 -jackson2Version=2.21.6 -jacksonVersion=3.1.6 +jackson2Version=2.21.7 +jacksonVersion=3.1.7 javaFormatVersion=0.0.48 junitJupiterVersion=6.1.3 kotlinVersion=2.4.20