From 8e8ed4f54b7e7e359b8364d25f1977c0f7809503 Mon Sep 17 00:00:00 2001
From: Himanshu Pal <himanshu.pal@skyflow.com>
Date: Mon, 28 Sep 2026 22:27:04 +0530
Subject: [PATCH 1/2] SK-2908,SK-2909-Added-fix-for-Policy-Voilation

---
 pom.xml         | 21 +++++++--------------
 samples/pom.xml | 11 +++++++++++
 2 files changed, 18 insertions(+), 14 deletions(-)

diff --git a/pom.xml b/pom.xml
index eeb166c3..b16ce579 100644
--- a/pom.xml
+++ b/pom.xml
@@ -51,7 +51,12 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-core</artifactId>
-            <version>2.13.0</version>
+            <version>2.18.11</version>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-databind</artifactId>
+            <version>2.18.11</version>
         </dependency>
         <dependency>
             <groupId>com.googlecode.json-simple</groupId>
@@ -61,7 +66,7 @@
         <dependency>
             <groupId>io.jsonwebtoken</groupId>
             <artifactId>jjwt</artifactId>
-            <version>0.9.1</version>
+            <version>0.12.6</version>
         </dependency>
         <dependency>
             <groupId>commons-codec</groupId>
@@ -73,18 +78,6 @@
             <artifactId>jaxb-api</artifactId>
             <version>2.3.1</version>
         </dependency>
-        <dependency>
-            <groupId>io.jsonwebtoken</groupId>
-            <artifactId>jjwt-impl</artifactId>
-            <version>0.11.2</version>
-            <scope>runtime</scope>
-        </dependency>
-        <dependency>
-            <groupId>io.jsonwebtoken</groupId>
-            <artifactId>jjwt-jackson</artifactId>
-            <version>0.11.2</version>
-            <scope>runtime</scope>
-        </dependency>
         <dependency>
             <groupId>junit</groupId>
             <artifactId>junit</artifactId>
diff --git a/samples/pom.xml b/samples/pom.xml
index c48ba302..52eb807c 100644
--- a/samples/pom.xml
+++ b/samples/pom.xml
@@ -20,6 +20,17 @@
             <artifactId>skyflow-java</artifactId>
             <version>1.15.0</version>
         </dependency>
+        <!-- Override vulnerable jackson-databind 2.9.6 (via io.jsonwebtoken:jjwt@0.9.1) and jackson-core 2.13.0 pulled transitively by skyflow-java 1.15.0 -->
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-databind</artifactId>
+            <version>2.18.11</version>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-core</artifactId>
+            <version>2.18.11</version>
+        </dependency>
 
     </dependencies>
 

From 03e30fb26330d7882e2e47b4da87675affdf7fce Mon Sep 17 00:00:00 2001
From: Himanshu Pal <himanshu.pal@skyflow.com>
Date: Tue, 29 Sep 2026 09:13:07 +0530
Subject: [PATCH 2/2] SK-2909-Added-fix-for-Policy-Voilation

---
 pom.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pom.xml b/pom.xml
index b16ce579..773ae880 100644
--- a/pom.xml
+++ b/pom.xml
@@ -227,3 +227,4 @@
     </profiles>
 
 </project>
+