From ded5fa6c9ceed7597e9c220f60360133b84360e2 Mon Sep 17 00:00:00 2001
From: Derek Mitchell <derekmitchell@splunk.com>
Date: Mon, 5 Oct 2026 12:00:58 -0700
Subject: [PATCH] resolved vuln tickets

---
 workshop/appd/app/pom.xml                                  | 2 +-
 .../demos/otel-discovery-demo/src/loanservice/build.gradle | 7 ++++++-
 workshop/profiling/doorgame/pom.xml                        | 2 +-
 workshop/tagging/creditcheckservice-java-with-tags/pom.xml | 2 +-
 workshop/tagging/creditcheckservice-java/pom.xml           | 2 +-
 5 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/workshop/appd/app/pom.xml b/workshop/appd/app/pom.xml
index 280628bc06..94fca6e377 100644
--- a/workshop/appd/app/pom.xml
+++ b/workshop/appd/app/pom.xml
@@ -20,7 +20,7 @@
     <properties>
         <java.version>17</java.version>
         <tomcat.version>10.1.59</tomcat.version>
-        <jackson-bom.version>2.21.5</jackson-bom.version>
+        <jackson-bom.version>2.21.6</jackson-bom.version>
     </properties>
 
     <dependencies>
diff --git a/workshop/demos/otel-discovery-demo/src/loanservice/build.gradle b/workshop/demos/otel-discovery-demo/src/loanservice/build.gradle
index 7ab079440d..41299e03bd 100644
--- a/workshop/demos/otel-discovery-demo/src/loanservice/build.gradle
+++ b/workshop/demos/otel-discovery-demo/src/loanservice/build.gradle
@@ -13,7 +13,7 @@ java {
 
 ext['tomcat.version'] = '10.1.59'
 ext['logback.version'] = '1.5.35'
-ext['jackson-bom.version'] = '2.21.5'
+ext['jackson-bom.version'] = '2.21.6'
 ext['spring-framework.version'] = '6.2.19'
 ext['spring-kafka.version'] = '3.3.16'
 
@@ -26,6 +26,11 @@ dependencies {
 	testImplementation 'org.springframework.boot:spring-boot-starter-test'
 	implementation 'com.mysql:mysql-connector-j'
 	implementation 'org.springframework.kafka:spring-kafka'
+	constraints {
+		implementation('at.yawk.lz4:lz4-java:1.11.1') {
+			because 'CVE-2026-59949'
+		}
+	}
 }
 
 tasks.named('test') {
diff --git a/workshop/profiling/doorgame/pom.xml b/workshop/profiling/doorgame/pom.xml
index 4045f03e15..fa836d721b 100644
--- a/workshop/profiling/doorgame/pom.xml
+++ b/workshop/profiling/doorgame/pom.xml
@@ -16,7 +16,7 @@
     <properties>
         <java.version>21</java.version>
         <tomcat.version>10.1.59</tomcat.version>
-        <jackson-bom.version>2.21.5</jackson-bom.version>
+        <jackson-bom.version>2.21.6</jackson-bom.version>
     </properties>
     <dependencyManagement>
         <dependencies>
diff --git a/workshop/tagging/creditcheckservice-java-with-tags/pom.xml b/workshop/tagging/creditcheckservice-java-with-tags/pom.xml
index 53064be404..25a43d8aeb 100644
--- a/workshop/tagging/creditcheckservice-java-with-tags/pom.xml
+++ b/workshop/tagging/creditcheckservice-java-with-tags/pom.xml
@@ -16,7 +16,7 @@
     <properties>
         <java.version>22</java.version>
         <tomcat.version>10.1.59</tomcat.version>
-        <jackson-bom.version>2.21.5</jackson-bom.version>
+        <jackson-bom.version>2.21.6</jackson-bom.version>
     </properties>
     <dependencyManagement>
         <dependencies>
diff --git a/workshop/tagging/creditcheckservice-java/pom.xml b/workshop/tagging/creditcheckservice-java/pom.xml
index 53064be404..25a43d8aeb 100644
--- a/workshop/tagging/creditcheckservice-java/pom.xml
+++ b/workshop/tagging/creditcheckservice-java/pom.xml
@@ -16,7 +16,7 @@
     <properties>
         <java.version>22</java.version>
         <tomcat.version>10.1.59</tomcat.version>
-        <jackson-bom.version>2.21.5</jackson-bom.version>
+        <jackson-bom.version>2.21.6</jackson-bom.version>
     </properties>
     <dependencyManagement>
         <dependencies>