From d16739a418bab0979c301f95f1cb39ff66b268e1 Mon Sep 17 00:00:00 2001
From: Adnan khan <adnank@testmuai.com>
Date: Thu, 25 Jun 2026 14:54:16 +0530
Subject: [PATCH 1/2] fix(security): bump jackson 2.18.6 -> 2.18.9 to fix
 CVE-2026-54512/54513/54514/54515

---
 karate-core/pom.xml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/karate-core/pom.xml b/karate-core/pom.xml
index b5a0e1836..381e81c88 100644
--- a/karate-core/pom.xml
+++ b/karate-core/pom.xml
@@ -27,17 +27,17 @@
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-core</artifactId>
-                <version>2.18.6</version>
+                <version>2.18.9</version>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-databind</artifactId>
-                <version>2.18.6</version>
+                <version>2.18.9</version>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-annotations</artifactId>
-                <version>2.18.6</version>
+                <version>2.18.9</version>
             </dependency>
         </dependencies>
     </dependencyManagement>

From c06a37fc7c8d2ff7ed0fda7b056f0a262907bfc0 Mon Sep 17 00:00:00 2001
From: Adnan khan <adnank@testmuai.com>
Date: Thu, 25 Jun 2026 15:07:49 +0530
Subject: [PATCH 2/2] fix(security): correct jackson bump to 2.18.8 (2.18.9 not
 yet released)

---
 karate-core/pom.xml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/karate-core/pom.xml b/karate-core/pom.xml
index 381e81c88..f9804ec8e 100644
--- a/karate-core/pom.xml
+++ b/karate-core/pom.xml
@@ -27,17 +27,17 @@
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-core</artifactId>
-                <version>2.18.9</version>
+                <version>2.18.8</version>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-databind</artifactId>
-                <version>2.18.9</version>
+                <version>2.18.8</version>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-annotations</artifactId>
-                <version>2.18.9</version>
+                <version>2.18.8</version>
             </dependency>
         </dependencies>
     </dependencyManagement>