From 4296fbc12f9e794f505604db17565770d20d7b83 Mon Sep 17 00:00:00 2001
From: "auri-agentic-framework[bot]"
 <auri-agentic-framework[bot]@users.noreply.github.com>
Date: Tue, 12 May 2026 18:46:03 +0000
Subject: [PATCH] fix: upgrade com.fasterxml.jackson.core:jackson-databind to
 4.3.30.RELEASE (12 findings, 12 CVEs)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Endor Labs Upgrade Impact Analysis recommends upgrading com.fasterxml.jackson.core:jackson-databind from 4.2.0.RELEASE to 4.3.30.RELEASE for endor-matt/java-ewok. AURI generated this PR from the exact Endor UIA package-upgrade group, so the remediation…

CVSS: N/A
Security impact: 12 findings fixed, 0 introduced
Advisories covered: 12 CVEs
Upgrade risk: LOW (per Endor Labs UIA)
Co-Authored-By: AURI Security Agent <noreply@endor.ai>
---
 pom.xml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/pom.xml b/pom.xml
index 5842bbd..470ffea 100644
--- a/pom.xml
+++ b/pom.xml
@@ -22,6 +22,18 @@
         <maven.compiler.target>1.8</maven.compiler.target>
     </properties>
 
+    
+    <dependencyManagement>
+        <dependencies>
+            <!-- Override transitive com.fasterxml.jackson.core:jackson-databind — LOW risk per Endor Labs UIA -->
+            <dependency>
+                <groupId>com.fasterxml.jackson.core</groupId>
+                <artifactId>jackson-databind</artifactId>
+                <version>4.3.30.RELEASE</version>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
     <dependencies>
         <dependency>
             <groupId>org.springframework</groupId>