This is an automated email from the ASF dual-hosted git repository.

JiriOndrusek pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel-quarkus.git

commit a6d295d55e1d2fa4780a89bd462744e9f53e666d
Author: jiriOndrusek-agent <[email protected]>
AuthorDate: Fri Nov 6 08:38:03 2026 +0000

    Manage com.github.jknack:handlebars 4.5.3 to fix CVE-2026-55760
    
    handlebars comes transitively via swagger-codegen into the
    openapi-validator and rest-openapi deployment modules.
    
    Co-Authored-By: Claude Opus 5.5 <[email protected]>
---
 pom.xml                                                       | 1 +
 poms/bom/pom.xml                                              | 5 +++++
 poms/bom/src/main/generated/flattened-full-pom.xml            | 5 +++++
 poms/bom/src/main/generated/flattened-reduced-pom.xml         | 5 +++++
 poms/bom/src/main/generated/flattened-reduced-verbose-pom.xml | 5 +++++
 5 files changed, 21 insertions(+)

diff --git a/pom.xml b/pom.xml
index e371100d607..22e2eac27ec 100644
--- a/pom.xml
+++ b/pom.xml
@@ -117,6 +117,7 @@
         <graalvm-docs.version>jdk25</graalvm-docs.version><!-- @sync 
io.quarkus:quarkus-documentation:${quarkus.version} 
prop:graal-community.tag-for-documentation -->
         <graal-js.version>${graalvm-version}</graal-js.version>
         <groovy.version>5.1.3</groovy.version><!-- @sync 
io.quarkiverse.groovy:quarkus-groovy-parent:${quarkiverse-groovy.version} 
prop:groovy.version -->
+        <handlebars.version>4.5.3</handlebars.version><!-- swagger-codegen 
transitive, upgrade to fix CVE-2026-55760 -->
         <hapi.version>${hapi-version}</hapi.version>
         <hapi-base.version>${hapi-base-version}</hapi-base.version>
         <hapi-fhir.version>${hapi-fhir-version}</hapi-fhir.version>
diff --git a/poms/bom/pom.xml b/poms/bom/pom.xml
index 3462ed1da48..0d47c7f3038 100644
--- a/poms/bom/pom.xml
+++ b/poms/bom/pom.xml
@@ -7369,6 +7369,11 @@
                     </exclusion>
                 </exclusions>
             </dependency>
+            <dependency>
+                <groupId>com.github.jknack</groupId>
+                <artifactId>handlebars</artifactId>
+                <version>${handlebars.version}</version>
+            </dependency>
             <dependency>
                 <groupId>com.github.jnr</groupId>
                 <artifactId>jnr-constants</artifactId>
diff --git a/poms/bom/src/main/generated/flattened-full-pom.xml 
b/poms/bom/src/main/generated/flattened-full-pom.xml
index 1b41f602baa..7255fe2cb31 100644
--- a/poms/bom/src/main/generated/flattened-full-pom.xml
+++ b/poms/bom/src/main/generated/flattened-full-pom.xml
@@ -7272,6 +7272,11 @@
           </exclusion>
         </exclusions>
       </dependency>
+      <dependency>
+        <groupId>com.github.jknack</groupId>
+        <artifactId>handlebars</artifactId>
+        <version>4.5.3</version>
+      </dependency>
       <dependency>
         <groupId>com.github.jnr</groupId>
         <artifactId>jnr-constants</artifactId>
diff --git a/poms/bom/src/main/generated/flattened-reduced-pom.xml 
b/poms/bom/src/main/generated/flattened-reduced-pom.xml
index a6a06386424..f21556fa308 100644
--- a/poms/bom/src/main/generated/flattened-reduced-pom.xml
+++ b/poms/bom/src/main/generated/flattened-reduced-pom.xml
@@ -371,6 +371,11 @@
           </exclusion>
         </exclusions>
       </dependency>
+      <dependency>
+        <groupId>com.github.jknack</groupId>
+        <artifactId>handlebars</artifactId>
+        <version>4.5.3</version>
+      </dependency>
       <dependency>
         <groupId>com.github.jnr</groupId>
         <artifactId>jnr-constants</artifactId>
diff --git a/poms/bom/src/main/generated/flattened-reduced-verbose-pom.xml 
b/poms/bom/src/main/generated/flattened-reduced-verbose-pom.xml
index b875489ddf4..b2098401a54 100644
--- a/poms/bom/src/main/generated/flattened-reduced-verbose-pom.xml
+++ b/poms/bom/src/main/generated/flattened-reduced-verbose-pom.xml
@@ -371,6 +371,11 @@
           </exclusion>
         </exclusions>
       </dependency>
+      <dependency>
+        <groupId>com.github.jknack</groupId>
+        <artifactId>handlebars</artifactId>
+        <version>4.5.3</version>
+      </dependency>
       <dependency>
         <groupId>com.github.jnr</groupId>
         <artifactId>jnr-constants</artifactId>

Reply via email to