From 4a0f943ca81660a9a0ebe1340db481b11641e2fc Mon Sep 17 00:00:00 2001
From: Ajith Prasad <37380177+aji-aju@users.noreply.github.com>
Date: Mon, 6 Oct 2025 19:07:51 +0530
Subject: [PATCH] Vulnerability fix for org.json (#23725)

---
 openmetadata-sdk/pom.xml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/openmetadata-sdk/pom.xml b/openmetadata-sdk/pom.xml
index 736f280ca0c..f8b2d680ef4 100644
--- a/openmetadata-sdk/pom.xml
+++ b/openmetadata-sdk/pom.xml
@@ -25,6 +25,7 @@
         <testcontainers.version>1.19.3</testcontainers.version>
         <jwt.version>4.4.0</jwt.version>
         <flyway.version>9.22.3</flyway.version>
+        <json.version>20240303</json.version>
     </properties>
 
     <dependencies>
@@ -76,6 +77,19 @@
             <groupId>io.socket</groupId>
             <artifactId>socket.io-client</artifactId>
             <version>2.1.1</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.json</groupId>
+                    <artifactId>json</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+
+        <!-- org.json with security fixes (excluded from socket.io-client) -->
+        <dependency>
+            <groupId>org.json</groupId>
+            <artifactId>json</artifactId>
+            <version>${json.version}</version>
         </dependency>
 
         <!-- Test Dependencies -->