Bump libraries with CVEs

gradle/changelog/cve.yaml

@@ -0,0 +1,2 @@
+- type: fixed
+  description: Updates of libraries with HIGH CVEs

gradle/dependencies.gradle

@@ -3,7 +3,7 @@ ext {
   guiceVersion = '7.0.0'
   resteasyVersion = '6.2.15.Final'
 
-  jacksonVersion = '2.21.0'
+  jacksonVersion = '2.21.1'
   jacksonAnnotationsVersion = '2.21'
 
   legmanVersion = '2.0.3'

scm-webapp/build.gradle

@@ -157,6 +157,12 @@ dependencies {
   // plugin transformer
   implementation 'org.eclipse.transformer:org.eclipse.transformer:1.0.0'
   implementation 'org.eclipse.transformer:org.eclipse.transformer.jakarta:1.0.0'
+
+  constraints {
+    implementation("commons-beanutils:commons-beanutils:1.11.0") {
+      because "previous versions have a CVE-2025-48734"
+    }
+  }
 }
 
 war {