Skip to content

chore: [DevOps] Pin jackson version (v2 and v3) to avoid CVE - #998

Merged
Jonas-Isr merged 3 commits into
mainfrom
cve-fix
Aug 24, 2026
Merged

chore: [DevOps] Pin jackson version (v2 and v3) to avoid CVE#998
Jonas-Isr merged 3 commits into
mainfrom
cve-fix

Conversation

@Jonas-Isr

Copy link
Copy Markdown
Member

Context

This PR pins jackson versions used in the AI SDK to the most recent ones (both for major version2 and 3) to mitigate CVE-2026-77310.

Successful run on this branch here.

@Jonas-Isr Jonas-Isr self-assigned this Aug 24, 2026
@Jonas-Isr Jonas-Isr added the please-review Request to review a pull-request label Aug 24, 2026
@Jonas-Isr Jonas-Isr changed the title chore: [Devops] Pin jackson version (v2 and v3) to avoid CVE chore: [DevOps] Pin jackson version (v2 and v3) to avoid CVE Aug 24, 2026
@Jonas-Isr
Jonas-Isr enabled auto-merge (squash) August 24, 2026 13:24
@Jonas-Isr
Jonas-Isr merged commit 2d1b643 into main Aug 24, 2026
7 of 8 checks passed
@Jonas-Isr
Jonas-Isr deleted the cve-fix branch August 24, 2026 16:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

please-review Request to review a pull-request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants