Skip to content

Fix Trivy Jackson findings#408

Merged
vasac merged 2 commits into
mainfrom
fix-trivy-jackson-2.21.5
Jul 15, 2026
Merged

Fix Trivy Jackson findings#408
vasac merged 2 commits into
mainfrom
fix-trivy-jackson-2.21.5

Conversation

@vasac

@vasac vasac commented Jul 13, 2026

Copy link
Copy Markdown
Member

Summary

  • update the Micronaut template Jackson version from 2.21.1 to 2.21.5
  • resolve CVE-2026-54512 through CVE-2026-54518 reported by the post-merge Trivy scan

Verification

  • mvn -f templates/micronaut/pom.xml -DskipTests package
  • dependency tree resolves jackson-databind 2.21.5 and Logback 1.5.35

Signed-off-by: Vaso Putica vaso.putica@oracle.com

Signed-off-by: Vaso Putica <vaso.putica@oracle.com>
@oracle-contributor-agreement oracle-contributor-agreement Bot added the OCA Verified All contributors have signed the Oracle Contributor Agreement. label Jul 13, 2026
Signed-off-by: Vaso Putica <vaso.putica@oracle.com>
@sonarqubecloud

Copy link
Copy Markdown

@vasac
vasac merged commit 9bc1a93 into main Jul 15, 2026
38 of 39 checks passed
@vasac
vasac deleted the fix-trivy-jackson-2.21.5 branch July 15, 2026 15:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

OCA Verified All contributors have signed the Oracle Contributor Agreement.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants