Skip to content

fix: upgrade jackson to 2.18.6 to resolve DoS vulnerability#190

Merged
JamieSinn merged 1 commit intomainfrom
fix/upgrade-jackson-core-2.18.6
Mar 16, 2026
Merged

fix: upgrade jackson to 2.18.6 to resolve DoS vulnerability#190
JamieSinn merged 1 commit intomainfrom
fix/upgrade-jackson-core-2.18.6

Conversation

@jonathannorris
Copy link
Member

Summary

  • Upgrades com.fasterxml.jackson.core:jackson-databind (and transitively jackson-core + jackson-annotations) from 2.15.3 to 2.18.6
  • Resolves Dependabot alert #11: Number Length Constraint Bypass in jackson-core Async Parser (high severity DoS)

@jonathannorris jonathannorris requested a review from a team as a code owner March 15, 2026 03:17
Copilot AI review requested due to automatic review settings March 15, 2026 03:17
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

@JamieSinn JamieSinn merged commit 4f31e2c into main Mar 16, 2026
8 checks passed
@JamieSinn JamieSinn deleted the fix/upgrade-jackson-core-2.18.6 branch March 16, 2026 13:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants