Repository navigation
Update dependency com.vonage:server-sdk to v9 - #31
mend-for-github-com[bot] wants to merge 1 commit into
Security Report
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Vulnerable Library | Direct Library | Suggested Fix | Issue |
|---|---|---|---|---|---|---|
CVE-2026-91777Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> server-sdk-9.14.0.jar (Root Library) -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
 High |
7.5 | Transitive jackson-databind-2.22.0.jar |
server-sdk-9.14.0.jar | Transitive com.fasterxml.jackson.core:jackson-databind:2.22.3 |
None |
CVE-2026-91777Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> spring-boot-starter-web-3.3.5.jar (Root Library) -> spring-boot-starter-json-3.3.5.jar -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
High |
7.5 | Transitive jackson-databind-2.22.0.jar |
spring-boot-starter-web-3.3.5.jar | Transitive com.fasterxml.jackson.core:jackson-databind:2.22.3 |
#20 |
CVE-2026-91776Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> server-sdk-9.14.0.jar (Root Library) -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
High |
7.5 | Transitive jackson-databind-2.22.0.jar |
server-sdk-9.14.0.jar | Transitive com.fasterxml.jackson.core:jackson-databind:2.22.3 |
None |
CVE-2026-91776Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> spring-boot-starter-web-3.3.5.jar (Root Library) -> spring-boot-starter-json-3.3.5.jar -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
High |
7.5 | Transitive jackson-databind-2.22.0.jar |
spring-boot-starter-web-3.3.5.jar | Transitive com.fasterxml.jackson.core:jackson-databind:2.22.3 |
#20 |
CVE-2026-89425Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-core/2.22.0/f25b20bdff54546bcaf9d1ac4701447f2d3968f7/jackson-core-2.22.0.jar Dependency Hierarchy: -> server-sdk-9.14.0.jar (Root Library) -> ❌ jackson-core-2.22.0.jar (Vulnerable Library) |
High |
7.5 | Transitive jackson-core-2.22.0.jar |
server-sdk-9.14.0.jar | Transitive 2.22.3 |
None |
CVE-2026-89425Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-core/2.22.0/f25b20bdff54546bcaf9d1ac4701447f2d3968f7/jackson-core-2.22.0.jar Dependency Hierarchy: -> spring-boot-starter-web-3.3.5.jar (Root Library) -> spring-boot-starter-json-3.3.5.jar -> jackson-module-parameter-names-2.22.0.jar -> ❌ jackson-core-2.22.0.jar (Vulnerable Library) |
High |
7.5 | Transitive jackson-core-2.22.0.jar |
spring-boot-starter-web-3.3.5.jar | Transitive 2.22.3 |
#20 |
CVE-2026-89407Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-core/2.22.0/f25b20bdff54546bcaf9d1ac4701447f2d3968f7/jackson-core-2.22.0.jar Dependency Hierarchy: -> server-sdk-9.14.0.jar (Root Library) -> ❌ jackson-core-2.22.0.jar (Vulnerable Library) |
High |
7.5 | Transitive jackson-core-2.22.0.jar |
server-sdk-9.14.0.jar | Transitive 2.22.3 |
None |
CVE-2026-89407Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-core/2.22.0/f25b20bdff54546bcaf9d1ac4701447f2d3968f7/jackson-core-2.22.0.jar Dependency Hierarchy: -> spring-boot-starter-web-3.3.5.jar (Root Library) -> spring-boot-starter-json-3.3.5.jar -> jackson-module-parameter-names-2.22.0.jar -> ❌ jackson-core-2.22.0.jar (Vulnerable Library) |
High |
7.5 | Transitive jackson-core-2.22.0.jar |
spring-boot-starter-web-3.3.5.jar | Transitive 2.22.3 |
#20 |
CVE-2026-68498Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-core/2.22.0/f25b20bdff54546bcaf9d1ac4701447f2d3968f7/jackson-core-2.22.0.jar Dependency Hierarchy: -> server-sdk-9.14.0.jar (Root Library) -> ❌ jackson-core-2.22.0.jar (Vulnerable Library) |
High |
7.5 | Transitive jackson-core-2.22.0.jar |
server-sdk-9.14.0.jar | Transitive 2.22.2 |
None |
CVE-2026-68498Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-core/2.22.0/f25b20bdff54546bcaf9d1ac4701447f2d3968f7/jackson-core-2.22.0.jar Dependency Hierarchy: -> spring-boot-starter-web-3.3.5.jar (Root Library) -> spring-boot-starter-json-3.3.5.jar -> jackson-module-parameter-names-2.22.0.jar -> ❌ jackson-core-2.22.0.jar (Vulnerable Library) |
High |
7.5 | Transitive jackson-core-2.22.0.jar |
spring-boot-starter-web-3.3.5.jar | Transitive 2.22.2 |
#20 |
CVE-2026-68497Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> server-sdk-9.14.0.jar (Root Library) -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
High |
7.5 | Transitive jackson-databind-2.22.0.jar |
server-sdk-9.14.0.jar | Transitive 2.22.2 |
None |
CVE-2026-68497Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> spring-boot-starter-web-3.3.5.jar (Root Library) -> spring-boot-starter-json-3.3.5.jar -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
High |
7.5 | Transitive jackson-databind-2.22.0.jar |
spring-boot-starter-web-3.3.5.jar | Transitive 2.22.2 |
#20 |
CVE-2026-59889Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> server-sdk-9.14.0.jar (Root Library) -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
 Medium |
6.5 | Transitive jackson-databind-2.22.0.jar |
server-sdk-9.14.0.jar | Transitive com.fasterxml.jackson.core:jackson-databind:2.22.1 |
None |
CVE-2026-59889Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> spring-boot-starter-web-3.3.5.jar (Root Library) -> spring-boot-starter-json-3.3.5.jar -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
Medium |
6.5 | Transitive jackson-databind-2.22.0.jar |
spring-boot-starter-web-3.3.5.jar | Transitive com.fasterxml.jackson.core:jackson-databind:2.22.1 |
#20 |
CVE-2026-83557Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> server-sdk-9.14.0.jar (Root Library) -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
Medium |
5.6 | Transitive jackson-databind-2.22.0.jar |
server-sdk-9.14.0.jar | Transitive 2.22.2 |
None |
CVE-2026-83557Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> spring-boot-starter-web-3.3.5.jar (Root Library) -> spring-boot-starter-json-3.3.5.jar -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
Medium |
5.6 | Transitive jackson-databind-2.22.0.jar |
spring-boot-starter-web-3.3.5.jar | Transitive 2.22.2 |
#20 |
CVE-2026-85473Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.auth0/java-jwt/4.5.0/d7004155fe57a107cc40fb6be0132d8ad2530613/java-jwt-4.5.0.jar Dependency Hierarchy: -> server-sdk-9.14.0.jar (Root Library) -> jwt-2.0.1.jar -> ❌ java-jwt-4.5.0.jar (Vulnerable Library) |
Medium |
5.3 | Transitive java-jwt-4.5.0.jar |
server-sdk-9.14.0.jar | None | |
CVE-2026-77310Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> server-sdk-9.14.0.jar (Root Library) -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
Medium |
5.3 | Transitive jackson-databind-2.22.0.jar |
server-sdk-9.14.0.jar | Transitive com.fasterxml.jackson.core:jackson-databind:2.22.1 |
None |
CVE-2026-77310Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> spring-boot-starter-web-3.3.5.jar (Root Library) -> spring-boot-starter-json-3.3.5.jar -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
Medium |
5.3 | Transitive jackson-databind-2.22.0.jar |
spring-boot-starter-web-3.3.5.jar | Transitive com.fasterxml.jackson.core:jackson-databind:2.22.1 |
#20 |
CVE-2026-54515Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> server-sdk-9.14.0.jar (Root Library) -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
Medium |
5.3 | Transitive jackson-databind-2.22.0.jar |
server-sdk-9.14.0.jar | None | |
CVE-2026-54515Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> spring-boot-starter-web-3.3.5.jar (Root Library) -> spring-boot-starter-json-3.3.5.jar -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
Medium |
5.3 | Transitive jackson-databind-2.22.0.jar |
spring-boot-starter-web-3.3.5.jar | #20 | |
CVE-2026-19032Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> server-sdk-9.14.0.jar (Root Library) -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
Medium |
5.3 | Transitive jackson-databind-2.22.0.jar |
server-sdk-9.14.0.jar | Transitive 2.22.2 |
None |
CVE-2026-19032Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.22.0/7aa54fc3755a9285eec2e73053bde1b9b845a9b2/jackson-databind-2.22.0.jar Dependency Hierarchy: -> spring-boot-starter-web-3.3.5.jar (Root Library) -> spring-boot-starter-json-3.3.5.jar -> ❌ jackson-databind-2.22.0.jar (Vulnerable Library) |
Medium |
5.3 | Transitive jackson-databind-2.22.0.jar |
spring-boot-starter-web-3.3.5.jar | Transitive 2.22.2 |
#20 |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2026-54515 | jackson-databind-2.18.0.jar |
| CVE-2026-83557 | jackson-databind-2.18.0.jar |
| CVE-2026-68498 | jackson-core-2.18.0.jar |
| CVE-2026-59889 | jackson-databind-2.18.0.jar |
| CVE-2026-91776 | jackson-databind-2.18.0.jar |
| CVE-2026-54514 | jackson-databind-2.18.0.jar |
| CVE-2026-77310 | jackson-databind-2.18.0.jar |
| CVE-2026-59888 | jackson-databind-2.18.0.jar |
| CVE-2026-54513 | jackson-databind-2.18.0.jar |
| CVE-2026-89407 | jackson-core-2.18.0.jar |
| CVE-2025-48924 | commons-lang3-3.17.0.jar |
| CVE-2026-89425 | jackson-core-2.18.0.jar |
| CVE-2026-54512 | jackson-databind-2.18.0.jar |
| CVE-2026-19032 | jackson-databind-2.18.0.jar |
| CVE-2026-18401 | jackson-core-2.18.0.jar |
| CVE-2026-91777 | jackson-databind-2.18.0.jar |
| CVE-2026-68497 | jackson-databind-2.18.0.jar |
Base branch total remaining vulnerabilities: 149
Base branch commit: null
Total libraries scanned: 64
Scan token: 1a254c55d6cf4a799a716e49fe018d4b