Home / Compliance / Corrective Action Plans / CAP-002
CAP-002 — Upgrade vulnerable Java dependencies
Details
Name
Upgrade vulnerable Java dependencies
CAP Status
Active
Initiated From
Priority
High
Owner
DBDaniel Brooks
Reviewer
SNSara Nasser
Target Date
December 20, 2026
Deadline Status
On Track
Approval Required
No
Description
Upgrade messaging and JSON libraries across Java services.
Root Cause Analysis
-
Linked Controls and Vulnerabilities
| Type | ID | Name | Context | Status | Owner | Date Mapped | |
|---|---|---|---|---|---|---|---|
| Vulnerability | Unsafe deserialization in shared messaging library | Assets: AST-001, AST-002 | Planned | DBDaniel Brooks | September 10, 2026 | ||
| Control | ECC-2-10-3 | Vulnerability management requirements are applied periodically | ECC — Cybersecurity | Partially Implemented | OHOmar Haddad | September 12, 2026 | |
| Vulnerability | Outdated JSON library in ledger batch jobs | Assets: AST-003 | Deployed / Pending Retest | LFLina Farouk | October 2, 2026 |
Tasks
| ID | Name | Type | Created By | Task Owner | Start Date | Due Date | Status | Deadline Status |
|---|---|---|---|---|---|---|---|---|
| T-604 | Upgrade messaging library | Corrective Action Task | OHOmar Haddad | DBDaniel Brooks | October 1, 2026 | December 10, 2026 | Open | On Time |
| T-605 | Upgrade JSON library in batch jobs | Corrective Action Task | OHOmar Haddad | LFLina Farouk | October 2, 2026 | October 28, 2026 | Pending Approval | Overdue |
Related To
CAP: CAP-002 Upgrade vulnerable Java dependencies
Vulnerability: VUL-002 Unsafe deserialization in shared messaging library
Vulnerability: VUL-010 Outdated JSON library in ledger batch jobs
Controls: ECC-2-10-3
Approval History
No Data Available