This is an automated email from the ASF dual-hosted git repository.
JiriOndrusek pushed a commit to branch 3.40.x
in repository https://gitbox.apache.org/repos/asf/camel-quarkus.git
The following commit(s) were added to refs/heads/3.40.x by this push:
new c755b6e60f8 Manage com.github.jknack:handlebars 4.5.3 to fix
CVE-2026-55760
c755b6e60f8 is described below
commit c755b6e60f8495898d0da1ddd486c7c437545c1a
Author: jiriOndrusek-agent <[email protected]>
AuthorDate: Fri Nov 6 08:59:25 2026 +0000
Manage com.github.jknack:handlebars 4.5.3 to fix CVE-2026-55760
(cherry picked from commit d1c88de803 and f199b4e9a2)
Co-Authored-By: Claude Opus 5.5 <[email protected]>
---
pom.xml | 1 +
poms/bom/pom.xml | 5 +++++
poms/bom/src/main/generated/flattened-full-pom.xml | 5 +++++
poms/bom/src/main/generated/flattened-reduced-pom.xml | 5 +++++
poms/bom/src/main/generated/flattened-reduced-verbose-pom.xml | 5 +++++
5 files changed, 21 insertions(+)
diff --git a/pom.xml b/pom.xml
index 55031a702bd..3d4eb1b6361 100644
--- a/pom.xml
+++ b/pom.xml
@@ -114,6 +114,7 @@
<graalvm.version>25.0.4.1</graalvm.version><!-- @sync
io.quarkus:quarkus-bom:${quarkus.version} dep:org.graalvm.sdk:nativeimage -->
<graalvm-docs.version>jdk21</graalvm-docs.version><!-- @sync
io.quarkus:quarkus-documentation:${quarkus.version}
prop:graal-community.tag-for-documentation -->
<groovy.version>5.0.8</groovy.version><!-- @sync
io.quarkiverse.groovy:quarkus-groovy-parent:${quarkiverse-groovy.version}
prop:groovy.version -->
+ <handlebars.version>4.5.3</handlebars.version><!-- swagger-codegen
transitive, upgrade to fix CVE-2026-55760, remove once fixed upstream:
https://github.com/apache/camel-quarkus/issues/9453 -->
<hapi.version>${hapi-version}</hapi.version>
<hapi-base.version>${hapi-base-version}</hapi-base.version>
<hapi-fhir.version>${hapi-fhir-version}</hapi-fhir.version>
diff --git a/poms/bom/pom.xml b/poms/bom/pom.xml
index 576defe547c..e6db812b64d 100644
--- a/poms/bom/pom.xml
+++ b/poms/bom/pom.xml
@@ -7548,6 +7548,11 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>com.github.jknack</groupId>
+ <artifactId>handlebars</artifactId>
+ <version>${handlebars.version}</version>
+ </dependency>
<dependency>
<groupId>com.github.jnr</groupId>
<artifactId>jnr-constants</artifactId>
diff --git a/poms/bom/src/main/generated/flattened-full-pom.xml
b/poms/bom/src/main/generated/flattened-full-pom.xml
index 729a49cb7d8..2291ecad870 100644
--- a/poms/bom/src/main/generated/flattened-full-pom.xml
+++ b/poms/bom/src/main/generated/flattened-full-pom.xml
@@ -7431,6 +7431,11 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>com.github.jknack</groupId>
+ <artifactId>handlebars</artifactId>
+ <version>4.5.3</version>
+ </dependency>
<dependency>
<groupId>com.github.jnr</groupId>
<artifactId>jnr-constants</artifactId>
diff --git a/poms/bom/src/main/generated/flattened-reduced-pom.xml
b/poms/bom/src/main/generated/flattened-reduced-pom.xml
index da46aaba659..41a229e45be 100644
--- a/poms/bom/src/main/generated/flattened-reduced-pom.xml
+++ b/poms/bom/src/main/generated/flattened-reduced-pom.xml
@@ -366,6 +366,11 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>com.github.jknack</groupId>
+ <artifactId>handlebars</artifactId>
+ <version>4.5.3</version>
+ </dependency>
<dependency>
<groupId>com.github.jnr</groupId>
<artifactId>jnr-constants</artifactId>
diff --git a/poms/bom/src/main/generated/flattened-reduced-verbose-pom.xml
b/poms/bom/src/main/generated/flattened-reduced-verbose-pom.xml
index 46d52f8fcb6..256af964270 100644
--- a/poms/bom/src/main/generated/flattened-reduced-verbose-pom.xml
+++ b/poms/bom/src/main/generated/flattened-reduced-verbose-pom.xml
@@ -366,6 +366,11 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>com.github.jknack</groupId>
+ <artifactId>handlebars</artifactId>
+ <version>4.5.3</version>
+ </dependency>
<dependency>
<groupId>com.github.jnr</groupId>
<artifactId>jnr-constants</artifactId>
