Vulnerability fix for org.json (#23725)

This commit is contained in:
Ajith Prasad 2025-10-06 19:07:51 +05:30 committed by GitHub
parent ea74622b21
commit 4a0f943ca8
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -25,6 +25,7 @@
<testcontainers.version>1.19.3</testcontainers.version>
<jwt.version>4.4.0</jwt.version>
<flyway.version>9.22.3</flyway.version>
<json.version>20240303</json.version>
</properties>
<dependencies>
@ -76,6 +77,19 @@
<groupId>io.socket</groupId>
<artifactId>socket.io-client</artifactId>
<version>2.1.1</version>
<exclusions>
<exclusion>
<groupId>org.json</groupId>
<artifactId>json</artifactId>
</exclusion>
</exclusions>
</dependency>
<!-- org.json with security fixes (excluded from socket.io-client) -->
<dependency>
<groupId>org.json</groupId>
<artifactId>json</artifactId>
<version>${json.version}</version>
</dependency>
<!-- Test Dependencies -->