From c0d6217a2438b3e22efd0ed89835f380632ba0c1 Mon Sep 17 00:00:00 2001 From: "lineaje-autofix[bot]" Date: Fri, 16 Jan 2026 13:07:54 +0000 Subject: [PATCH 1/3] [lineaje] Update com.fasterxml.jackson.core:jackson-core:2.12.3 to 2.12.5 Fixes CVEs - CVE-2025-49128,CVE-2025-52999 --- pom.xml | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 7f8c9c7..ce6f908 100644 --- a/pom.xml +++ b/pom.xml @@ -169,7 +169,18 @@ commons-jexl3 3.1 - + + + + + com.fasterxml.jackson.core + + jackson-core + + 2.12.5 + + + From db9d76be3c56a4b8c195c97085a9db00df25ef22 Mon Sep 17 00:00:00 2001 From: "lineaje-autofix[bot]" Date: Fri, 16 Jan 2026 13:08:53 +0000 Subject: [PATCH 2/3] [lineaje] Update xalan:xalan:2.7.2 to 2.7.3 Fixes CVEs - CVE-2022-34169 --- pom.xml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/pom.xml b/pom.xml index ce6f908..10bc399 100644 --- a/pom.xml +++ b/pom.xml @@ -180,6 +180,16 @@ 2.12.5 + + + + xalan + + xalan + + 2.7.3 + + From d6cca73698fd370f96bba5d83e6e90f5be7dd8b0 Mon Sep 17 00:00:00 2001 From: "lineaje-autofix[bot]" Date: Fri, 16 Jan 2026 13:09:52 +0000 Subject: [PATCH 3/3] [lineaje] Update org.apache.santuario:xmlsec:2.2.1 to 2.2.5 Fixes CVEs - CVE-2021-40690,CVE-2023-44483 --- pom.xml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/pom.xml b/pom.xml index 10bc399..fd2356b 100644 --- a/pom.xml +++ b/pom.xml @@ -190,6 +190,16 @@ 2.7.3 + + + + org.apache.santuario + + xmlsec + + 2.2.5 + +