From 7d6be9cd3af8905eb8711ea8276cdd0011247cb2 Mon Sep 17 00:00:00 2001
From: Thomas Michael <thomas.michael@cloudogu.com>
Date: Thu, 18 Jun 2026 08:40:33 +0200
Subject: [PATCH 1/3] update tools.jackson.core dependencies for
 jackson-databind because of CVEs

---
 pom.xml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/pom.xml b/pom.xml
index a9000a88c..cd8019feb 100644
--- a/pom.xml
+++ b/pom.xml
@@ -79,6 +79,22 @@
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
+            <!-- Source: https://mvnrepository.com/artifact/tools.jackson.core/jackson-databind -->
+            <!-- used for com.github.victools:jsonschema-generator -->
+            <dependency>
+                <groupId>tools.jackson.core</groupId>
+                <artifactId>jackson-databind</artifactId>
+                <version>3.2.0</version>
+                <scope>compile</scope>
+            </dependency>
+            <!-- Source: https://mvnrepository.com/artifact/tools.jackson.core/jackson-core -->
+            <!-- used for com.github.victools:jsonschema-generator -->
+            <dependency>
+                <groupId>tools.jackson.core</groupId>
+                <artifactId>jackson-core</artifactId>
+                <version>3.2.0</version>
+                <scope>compile</scope>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 

From 57a7fa4d66e743863ec2bacc3593390f8440ef38 Mon Sep 17 00:00:00 2001
From: Thomas Michael <thomas.michael@cloudogu.com>
Date: Thu, 18 Jun 2026 09:41:10 +0200
Subject: [PATCH 2/3] add jackson-core dependency to pom because of CVEs

---
 pom.xml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pom.xml b/pom.xml
index cd8019feb..3f5bc9558 100644
--- a/pom.xml
+++ b/pom.xml
@@ -95,6 +95,14 @@
                 <version>3.2.0</version>
                 <scope>compile</scope>
             </dependency>
+            <!-- Source: https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-core -->
+            <!-- used for io-fabric8, gitlab4j, groovy-yaml and retrofit -->
+            <dependency>
+                <groupId>com.fasterxml.jackson.core</groupId>
+                <artifactId>jackson-core</artifactId>
+                <version>2.22.0</version>
+                <scope>compile</scope>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 

From b13886aa7ec5a01b733b5ecf94ce834e6cadf102 Mon Sep 17 00:00:00 2001
From: Thomas Michael <thomas.michael@cloudogu.com>
Date: Thu, 18 Jun 2026 12:01:14 +0200
Subject: [PATCH 3/3] add jackson-databind dependency to pom because of CVEs

---
 pom.xml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pom.xml b/pom.xml
index 3f5bc9558..5b7f57aa1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -103,6 +103,14 @@
                 <version>2.22.0</version>
                 <scope>compile</scope>
             </dependency>
+            <!-- Source: https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind -->
+            <!-- used for io-fabric8, gitlab4j, groovy-yaml and retrofit -->
+            <dependency>
+                <groupId>com.fasterxml.jackson.core</groupId>
+                <artifactId>jackson-databind</artifactId>
+                <version>2.22.0</version>
+                <scope>compile</scope>
+            </dependency>
         </dependencies>
     </dependencyManagement>