Fix vulnerabilities in server dependencies (#13659)

This commit is contained in:
Sriharsha Chintalapani 2023-10-19 19:33:33 -07:00 committed by GitHub
parent 790b4c2287
commit c3b65f5807
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 14 additions and 2 deletions

View File

@ -324,7 +324,7 @@
<dependency>
<groupId>org.json</groupId>
<artifactId>json</artifactId>
<version>20230618</version>
<version>20231013</version>
</dependency>
<dependency>

View File

@ -20,6 +20,12 @@
<groupId>org.elasticsearch.client</groupId>
<artifactId>elasticsearch-rest-high-level-client</artifactId>
<optional>true</optional>
<exclusions>
<exclusion>
<groupId>org.yaml</groupId>
<artifactId>snakeyaml</artifactId>
</exclusion>
</exclusions>
</dependency>
</dependencies>
<profiles>

View File

@ -20,6 +20,12 @@
<groupId>org.opensearch.client</groupId>
<artifactId>opensearch-rest-high-level-client</artifactId>
<optional>true</optional>
<exclusions>
<exclusion>
<groupId>org.yaml</groupId>
<artifactId>snakeyaml</artifactId>
</exclusion>
</exclusions>
</dependency>
</dependencies>
<profiles>

View File

@ -479,7 +479,7 @@
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-io</artifactId>
<!-- 9.x required for Dropwizard 2.1.x -->
<version>9.4.51.v20230217</version>
<version>9.4.52.v20230823</version>
</dependency>
<!-- avoid security issue https://security.snyk.io/vuln/SNYK-JAVA-ORGGLASSFISH-1297098 -->