Skip to content

Fix vulnerable dependency CVE-2026-54512#24166

Merged
wing328 merged 1 commit into
OpenAPITools:masterfrom
mbaxr:master
Jun 30, 2026
Merged

Fix vulnerable dependency CVE-2026-54512#24166
wing328 merged 1 commit into
OpenAPITools:masterfrom
mbaxr:master

Conversation

@mbaxr

@mbaxr mbaxr commented Jun 30, 2026

Copy link
Copy Markdown
Contributor

Dependency update for CVE-2026-54512

#24165

Update of jackson library to avoid CVE

PR checklist

  • Read the contribution guidelines.
  • Run the following to build the project and update samples:
    ./mvnw clean package || exit
    ./bin/generate-samples.sh ./bin/configs/*.yaml || exit
    ./bin/utils/export_docs_generators.sh || exit
    
    (For Windows users, please run the script in WSL)
    Commit all changed files.
    This is important, as CI jobs will verify all generator outputs of your HEAD commit as it would merge with master.
    These must match the expectations made by your contribution.
    You may regenerate an individual generator by passing the relevant config(s) as an argument to the script, for example ./bin/generate-samples.sh bin/configs/java*.
    IMPORTANT: Do NOT purge/delete any folders/files (e.g. tests) when regenerating the samples as manually written tests may be removed.
  • If your PR is targeting a particular programming language, @mention the technical committee members, so they are more likely to review the pull request.

Summary by cubic

Upgrade com.fasterxml.jackson to 2.21.4 to remediate CVE-2026-54512. No functional changes; resolves a dependency vulnerability.

  • Dependencies
    • Update jackson.version in pom.xml from 2.21.1 to 2.21.4.

Written for commit b70ed98. Summary will update on new commits.

Review in cubic

@mbaxr mbaxr changed the title Update pom.xml Fix vulnerable dependency CVE-2026-54512 Jun 30, 2026

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 1 file

Re-trigger cubic

@wing328 wing328 merged commit 624d729 into OpenAPITools:master Jun 30, 2026
16 checks passed
@wing328 wing328 added this to the 7.24.0 milestone Jun 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants