[Snyk] Security upgrade com.google.http-client:google-http-client-jackson2 from 1.42.3 to 1.45.0

[mo-auto]

Snyk has created this PR to fix 1 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• jans-auth-server/common/pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLJACKSONCORE-7569538	649	com.google.http-client:google-http-client-jackson2: 1.42.3 -> 1.45.0 No Known Exploit

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)

[dryrunsecurity]

DryRun Security Summary

The provided code change updates the google-http-client-jackson2 dependency in the jans-auth-server/common/pom.xml file from version 1.42.3 to 1.45.0, which is generally a good practice to get bug fixes, security patches, and performance improvements, as long as the changes in the new version have been properly reviewed and tested.

Expand for full summary

Summary:

The provided code change is an update to the google-http-client-jackson2 dependency in the jans-auth-server/common/pom.xml file. The version of the dependency is being updated from 1.42.3 to 1.45.0. From an application security perspective, this change is not particularly concerning, as updating dependencies to their latest versions is generally a good practice, as it can provide bug fixes, security patches, and performance improvements.

The google-http-client-jackson2 library is a client library for the Google HTTP Client Library for Java, which is used for making HTTP requests. Upgrading to the latest version of this library is unlikely to introduce any significant security risks, as long as the changes in the new version have been properly reviewed and tested. However, it's important to carefully review the release notes and change logs to understand any breaking changes or new features that may impact the application, and to thoroughly test the application after the dependency update to ensure that everything is still functioning as expected.

Files Changed:

• jans-auth-server/common/pom.xml: This file has been updated to change the version of the google-http-client-jackson2 dependency from 1.42.3 to 1.45.0.

Code Analysis

We ran 9 analyzers against 1 file and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.