[TOMEE-4233] Upgrade johnzon-mapper to 1.2.21

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 8.0.15, 9.1.0
• Component/s: TomEE Core Server
• Assignee: Richard Zowalla
• Reporter: RAJU THANNEERU
• Created: 12/Jul/23 06:27
• Updated: 12/Jul/23 10:20
• Resolved: 12/Jul/23 10:20

Description

We have a new vulnerability on johnzon-mapper-1.2.20.jar and johnzon-mapper-1.2.20-jakarta.jar, see below link.

https://nvd.nist.gov/vuln/detail/CVE-2023-33008

Looks like this is already addressed in 1.2.21

Issue Links

• is fixed by: TOMEE-4228 Johnzon 1.2.21