Known vulnereabilities in jackson-databind-2.9.6

Legacy Knowledge Base

Published Jul. 2, 2025

Known vulnereabilities in jackson-databind-2.9.6

Written By

Kanchan Bisht

Legacy Article

You are viewing an article from our legacy "FastTrack" publication program, made available for informational purposes. Articles in this program were published without a requirement for independent editing or verification and are provided"as is" without guarantee.

Before using any information from this article, independently verify its suitability for your situation and project.

Issue

apio-architect-impl has a dependency of jackson-databind-2.9.6 which has the following known vulnerabilities:

Environment

Liferay DXP 7.0
Liferay DXP 7.1
Liferay DXP 7.2

Resolution

In DXP 7.2, APIO Architect development has been dropped and is no longer supported.
As a result, apio-architect-impl has been addressed in the following fix pack:
- For DXP 7.2: Liferay-dxp-fix-pack-5
- For DXP 7.1: Liferay-dxp-fix-pack-10
- For DXP 7.0: Liferay-dxp-de-78

Additional Information

If the hotfix is required for this issue, please create a support ticket requesting the hotfix by attaching the patch details.
Installing Fix Packs and Hotfixes on Liferay DXP will guide you to install the Fixpack/Hotfix in your environment.
LPS-90799

Did this article resolve your issue ?