Skip to content

security: upgrade vulnerable dependencies and centralize version management - #117

Merged
pallakartheekreddy merged 1 commit into
developfrom
vuln-fix
Feb 27, 2026
Merged

security: upgrade vulnerable dependencies and centralize version management#117
pallakartheekreddy merged 1 commit into
developfrom
vuln-fix

Conversation

@chethann007

Copy link
Copy Markdown
Collaborator

Description

This PR remediates several security vulnerabilities by upgrading core libraries and centralizing version control in the root pom.xml.

Key Fixes:

  • Upgraded Dependencies: Updated Jackson (2.17.2), Netty (4.1.128.Final), Snappy (1.1.10.7), SnakeYAML (2.2), and Logback (1.4.14).
  • Dependency Management: Moved versions to a central dependencyManagement block to ensure consistency across all modules.
  • Vulnerability Remediation: Added explicit exclusions for vulnerable transitive dependencies in cassandra-utils and service modules.

@pallakartheekreddy
pallakartheekreddy merged commit bb33133 into develop Feb 27, 2026
1 check failed
@pallakartheekreddy
pallakartheekreddy deleted the vuln-fix branch February 27, 2026 06:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants