Release `cf-java-logging-support-log4j2: 3.8.4` transitively depends on `jackson-core: 2.14.2`: ``` [INFO] | +- com.sap.hcp.cf.logging:cf-java-logging-support-log4j2:jar:3.8.4:compile [INFO] | | \- com.sap.hcp.cf.logging:cf-java-logging-support-core:jar:3.8.4:compile [INFO] | | \- com.fasterxml.jackson.jr:jackson-jr-objects:jar:2.14.2:compile [INFO] | | \- com.fasterxml.jackson.core:jackson-core:jar:2.14.2:compile ``` Library `jackson-core: 2.14.2` contains a DDoS vulnerability, see e.g.: https://security.snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-7569538 Please consider upgrading to `2.15.0` or higher.