From 3a71df0264d143a02a51a898951e583a0fcf7639 Mon Sep 17 00:00:00 2001
From: sidhdirenge <sidhdirenge@google.com>
Date: Thu, 18 Jun 2026 07:38:38 +0000
Subject: [PATCH] Bump jackson.version to 2.13.4.2 to resolve
 jackson-core/databind CVEs

---
 pom.xml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index c7016f1..bb7a8d9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -88,9 +88,19 @@
     <main.basedir>${project.basedir}</main.basedir>
     <logback.version>1.0.9</logback.version>
     <slf4j.version>1.7.25</slf4j.version>
-    <jackson.version>2.10.5.1</jackson.version>
+    <jackson.version>2.13.4.2</jackson.version>
   </properties>
 
+  <dependencyManagement>
+    <dependencies>
+      <dependency>
+        <groupId>com.fasterxml.jackson.module</groupId>
+        <artifactId>jackson-module-scala_2.12</artifactId>
+        <version>2.13.4</version>
+      </dependency>
+    </dependencies>
+  </dependencyManagement>
+
   <dependencies>
     <dependency>
       <groupId>io.cdap.cdap</groupId>