From af56ff7c9b748659006be2d1dbc09960611b96b2 Mon Sep 17 00:00:00 2001
From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Thu, 23 Apr 2026 02:20:16 +0000
Subject: [PATCH] fix(security): force jackson-databind to 2.15.4 in
 dependencyManagement

Co-Authored-By: Achal Channarasappa <achal.channarasappa@cognition.ai>
---
 pom.xml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/pom.xml b/pom.xml
index fc5bfeac..97a34c6c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -29,6 +29,15 @@
 	<properties>
 		<java.version>17</java.version>
 	</properties>
+	<dependencyManagement>
+		<dependencies>
+			<dependency>
+				<groupId>com.fasterxml.jackson.core</groupId>
+				<artifactId>jackson-databind</artifactId>
+				<version>2.15.4</version>
+			</dependency>
+		</dependencies>
+	</dependencyManagement>
 	<dependencies>
 		<dependency>
 			<groupId>org.springframework.boot</groupId>