[4.2.0][Dependency Upgrade] json-smart version upgrade

[msm1992]

Description

This issue is created to track json-smart version upgrade in APIM 4.2.0.

Json-smart version used in APIM 4.2.0 plugins is 2.4.7 which is not affected by known vulnerabilities. However the json-smart version 2.3 is used in jsonpath 2.4.0.wso2v1 and it is affected by a known CVE. Hence the fix for this it to upgrade the jsonpath version in APIM 4.2.0 to 2.6.0.wso2v1. [1]

[1]. https://github.com/wso2/orbit/blob/master/jsonpath/2.6.0.wso2v1/pom.xml

Affected Component

APIM

Version

4.2.0

Related Issues

No response

Suggested Labels

No response

[msm1992]

Will be fixed with below PRs.

[1]. wso2/carbon-analytics-common#822
[2]. wso2/carbon-apimgt#11820
[3]. wso2/product-apim#13111