Remediate Jackson-databind CVEs and instrumentation-verifier failure by IshikaDawda · Pull Request #407 · newrelic/csec-java-agent

Update jackson-databind dependency to version 2.18.8 to fix CVE-2026-54512

IshikaDawda

committed

3ab06ba

Update jackson-databind dependency to version 2.18.9 and remove jcenter repository from build files

IshikaDawda

committed

7b578a8

Add exclusions for Jackson core's version 17/21 entries in relocatedShadowJar task

IshikaDawda

committed

b56e8ae

Add excludeRegex for versioning in verify Instrumentation for JSP-3 and Servlet-6 to exclude development milestone builds and update version range for lettuce-5

IshikaDawda

committed

4bb4160

Update jackson-databind version to 2.18.9 in THIRD_PARTY_NOTICES.md

IshikaDawda

committed

83ed869

Update verifyInstrumentation configuration to allow all lettuce-core versions and refine exclusion regex

IshikaDawda

committed

73a7cc5

Force jackson-databind version 2.6.7.1 in testRuntimeClasspath to prevent dependency resolution issues for aws-java-sdk-dynamodb

IshikaDawda

committed

e740e2a

Fix regex case sensitivity in verifyInstrumentation and update command type retrieval method to toString

IshikaDawda

committed

7e3dfc8

Update Changelog for version 1.8.0

IshikaDawda

committed

83f8491

Add dependency review job and fix URL typo in dependency submission workflow

IshikaDawda

committed

a4e50cb

Navigation Menu

Uh oh!

Remediate Jackson-databind CVEs and instrumentation-verifier failure - #407

Remediate Jackson-databind CVEs and instrumentation-verifier failure#407
IshikaDawda wants to merge 10 commits into
mainfrom
fix/CVE-2026-54512

Commits on Jul 29, 2026

Update jackson-databind dependency to version 2.18.8 to fix CVE-2026-54512

Update jackson-databind dependency to version 2.18.9 and remove jcenter repository from build files

Add exclusions for Jackson core's version 17/21 entries in relocatedShadowJar task

Add excludeRegex for versioning in verify Instrumentation for JSP-3 and Servlet-6 to exclude development milestone builds and update version range for lettuce-5

Update jackson-databind version to 2.18.9 in THIRD_PARTY_NOTICES.md

Update verifyInstrumentation configuration to allow all lettuce-core versions and refine exclusion regex

Force jackson-databind version 2.6.7.1 in testRuntimeClasspath to prevent dependency resolution issues for aws-java-sdk-dynamodb

Fix regex case sensitivity in verifyInstrumentation and update command type retrieval method to toString

Update Changelog for version 1.8.0

Add dependency review job and fix URL typo in dependency submission workflow