upgrade tomcat/jackson-core for vulns

Author: jhua-vmware

g11n-ws/build.gradle

@@ -1,4 +1,4 @@
-//Copyright 2019-2025 VMware, Inc.
+//Copyright 2019-2026 VMware, Inc.
 //SPDX-License-Identifier: EPL-2.0
 
 buildscript {

g11n-ws/vip-common/src/main/java/com/vmware/vip/common/cache/SingletonCacheImpl.java

@@ -12,11 +12,14 @@
 import org.ehcache.config.builders.CacheManagerBuilder;
 import org.ehcache.xml.XmlConfiguration;
 
+import java.net.URL;
 import java.util.ArrayList;
 import java.util.List;
 
 public class SingletonCacheImpl implements SingletonCache{
 
+    private static final String EHCACHE_CONFIG_RESOURCE = "ehcache3.xml";
+
     private boolean cacheEnable;
 
     private CacheManager manager;
@@ -26,12 +29,30 @@ public class SingletonCacheImpl implements SingletonCache{
     public SingletonCacheImpl(boolean enable){
         this.cacheEnable = enable;
         if (this.cacheEnable){
-            Configuration xmlConf = new XmlConfiguration(SingletonCacheImpl.class.getResource("/ehcache3.xml"));
-            this.manager= CacheManagerBuilder.newCacheManager(xmlConf);
+            URL configUrl = getEhcacheConfigUrl();
+            if (configUrl == null) {
+                throw new IllegalStateException(
+                    "Ehcache config resource not found: " + EHCACHE_CONFIG_RESOURCE
+                        + ". Ensure it is on the classpath (e.g. in src/main/resources).");
+            }
+            Configuration xmlConf = new XmlConfiguration(configUrl);
+            this.manager = CacheManagerBuilder.newCacheManager(xmlConf);
             this.manager.init();
         }
     }
 
+    /**
+     * Resolve ehcache3.xml from the classpath. Tries thread context class loader first
+     * (for Spring Boot fat jars), then the class loader of this class.
+     */
+    private static URL getEhcacheConfigUrl() {
+        URL url = Thread.currentThread().getContextClassLoader().getResource(EHCACHE_CONFIG_RESOURCE);
+        if (url == null) {
+            url = SingletonCacheImpl.class.getResource("/" + EHCACHE_CONFIG_RESOURCE);
+        }
+        return url;
+    }
+
     private <K, V> Cache<K, V> getCache(CacheName cachename, Class<K> keyType, Class<V> valueType) throws VIPCacheException{
         return this.manager.getCache(cachename.name(), keyType,valueType);
     }