Update jackson.version by dev-mend-for-github-com[bot] · Pull Request #21 · TankOrgDev/struts

Security Report

You have successfully remediated 17 vulnerabilities, but introduced 16 new vulnerabilities in this branch.

❌ New vulnerabilities:

Vulnerability	Severity	CVSS Score	Vulnerable Library	Direct Library	Suggested Fix	Issue
CVE-2026-54513 Path to dependency file: /apps/rest-showcase/pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.6/jackson-databind-2.18.6.jar,/home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.6/jackson-databind-2.18.6.jar Dependency Hierarchy: -> ❌ jackson-databind-2.18.6.jar (Vulnerable Library)	High	8.1	`Direct` jackson-databind-2.18.6.jar	jackson-databind-2.18.6.jar	com.fasterxml.jackson.core:jackson-databind:2.18.8	None
CVE-2026-54512 Path to dependency file: /apps/rest-showcase/pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.6/jackson-databind-2.18.6.jar,/home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.6/jackson-databind-2.18.6.jar Dependency Hierarchy: -> ❌ jackson-databind-2.18.6.jar (Vulnerable Library)	High	8.1	`Direct` jackson-databind-2.18.6.jar	jackson-databind-2.18.6.jar	com.fasterxml.jackson.core:jackson-databind:2.18.8	None
CVE-2020-11023 Dependency Hierarchy: -> ❌ jquery-1.12.4.min.js (Vulnerable Library)	Medium	6.9	`Direct` jquery-1.12.4.min.js	jquery-1.12.4.min.js	jquery - 3.5.0	#⁠8
CVE-2020-11022 Dependency Hierarchy: -> ❌ jquery-1.12.4.min.js (Vulnerable Library)	Medium	6.9	`Direct` jquery-1.12.4.min.js	jquery-1.12.4.min.js	jquery - 3.5.0	#⁠8
CVE-2026-59889 Path to dependency file: /apps/rest-showcase/pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.6/jackson-databind-2.18.6.jar,/home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.6/jackson-databind-2.18.6.jar Dependency Hierarchy: -> ❌ jackson-databind-2.18.6.jar (Vulnerable Library)	Medium	6.5	`Direct` jackson-databind-2.18.6.jar	jackson-databind-2.18.6.jar	2.18.9	None
CVE-2026-59888 Path to dependency file: /apps/rest-showcase/pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.6/jackson-databind-2.18.6.jar,/home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.6/jackson-databind-2.18.6.jar Dependency Hierarchy: -> ❌ jackson-databind-2.18.6.jar (Vulnerable Library)	Medium	6.5	`Direct` jackson-databind-2.18.6.jar	jackson-databind-2.18.6.jar	2.18.8	None
CVE-2019-8331 Dependency Hierarchy: -> ❌ bootstrap-3.3.4.min.js (Vulnerable Library)	Medium	6.1	`Direct` bootstrap-3.3.4.min.js	bootstrap-3.3.4.min.js		#⁠5
CVE-2019-11358 Dependency Hierarchy: -> ❌ jquery-1.12.4.min.js (Vulnerable Library)	Medium	6.1	`Direct` jquery-1.12.4.min.js	jquery-1.12.4.min.js	jquery - 3.4.0	#⁠8
CVE-2018-20677 Dependency Hierarchy: -> ❌ bootstrap-3.3.4.min.js (Vulnerable Library)	Medium	6.1	`Direct` bootstrap-3.3.4.min.js	bootstrap-3.3.4.min.js		#⁠5
CVE-2018-20676 Dependency Hierarchy: -> ❌ bootstrap-3.3.4.min.js (Vulnerable Library)	Medium	6.1	`Direct` bootstrap-3.3.4.min.js	bootstrap-3.3.4.min.js		#⁠5
CVE-2018-14042 Dependency Hierarchy: -> ❌ bootstrap-3.3.4.min.js (Vulnerable Library)	Medium	6.1	`Direct` bootstrap-3.3.4.min.js	bootstrap-3.3.4.min.js		#⁠5
CVE-2018-14040 Dependency Hierarchy: -> ❌ bootstrap-3.3.4.min.js (Vulnerable Library)	Medium	6.1	`Direct` bootstrap-3.3.4.min.js	bootstrap-3.3.4.min.js		#⁠5
CVE-2016-10735 Dependency Hierarchy: -> ❌ bootstrap-3.3.4.min.js (Vulnerable Library)	Medium	6.1	`Direct` bootstrap-3.3.4.min.js	bootstrap-3.3.4.min.js		#⁠5
CVE-2015-9251 Dependency Hierarchy: -> ❌ jquery-1.12.4.min.js (Vulnerable Library)	Medium	6.1	`Direct` jquery-1.12.4.min.js	jquery-1.12.4.min.js		#⁠8
CVE-2026-54515 Path to dependency file: /apps/rest-showcase/pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.6/jackson-databind-2.18.6.jar,/home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.6/jackson-databind-2.18.6.jar Dependency Hierarchy: -> ❌ jackson-databind-2.18.6.jar (Vulnerable Library)	Medium	5.3	`Direct` jackson-databind-2.18.6.jar	jackson-databind-2.18.6.jar	com.fasterxml.jackson.core:jackson-databind:2.18.9	None
CVE-2026-54514 Path to dependency file: /apps/rest-showcase/pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.6/jackson-databind-2.18.6.jar,/home/wss-scanner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.6/jackson-databind-2.18.6.jar Dependency Hierarchy: -> ❌ jackson-databind-2.18.6.jar (Vulnerable Library)	Medium	5.3	`Direct` jackson-databind-2.18.6.jar	jackson-databind-2.18.6.jar	com.fasterxml.jackson.core:jackson-databind:2.18.8	None

✔️ Remediated vulnerabilities:

Vulnerability	Vulnerable Library
CVE-2026-18401	jackson-core-2.16.1.jar
CVE-2019-11358	jquery-1.9.2.js
CVE-2020-11023	jquery-2.1.4.min.js
CVE-2026-59888	jackson-databind-2.16.1.jar
CVE-2020-11022	jquery-1.9.2.js
CVE-2018-20677	struts-STRUTS_2_5_33
CVE-2019-11358	jquery-2.1.4.min.js
CVE-2026-54513	jackson-databind-2.16.1.jar
CVE-2026-54515	jackson-databind-2.16.1.jar
CVE-2020-11023	jquery-1.9.2.js
CVE-2026-33813	jquery-2.1.4.min.js
CVE-2026-54512	jackson-databind-2.16.1.jar
CVE-2015-9251	jquery-2.1.4.min.js
CVE-2015-9251	jquery-1.9.2.js
CVE-2020-11022	jquery-2.1.4.min.js
CVE-2018-14040	struts-STRUTS_2_5_33
CVE-2026-54514	jackson-databind-2.16.1.jar

Base branch total remaining vulnerabilities: 72
Base branch commit: null

Total libraries scanned: 101

Scan token: 81c0a82e4a644606b4f55daa27a7163d

Navigation Menu

Uh oh!

Update jackson.version - #21

Update jackson.version#21
dev-mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/jackson.version

Uh oh!

Security Report

Re-running checks...