Upgrade jackson-core to latest. Is this repo still maintained ?

[guillaume-verdon-sword]

Hello,

Our vulnerability scanner keeps raising alerts because we're using open-api-generator which relies on jackson-databind-nullable.

It seems the latest version here was released in Febuary 2023 and is dependent on com.fasterxml.jackson.core:jackson-core@2.14.0-rc2 which introduce a CWE-400 (see FasterXML/jackson-core#861)

I can see a PR that could fix this issue is opened here #52 but no follow-up was done since August 2024. Any chance to get it merged ? Is this repo still maintained ?

Regards :)

Guillaume