yujunjun/datahub
2
0
Fork 0
mirror of https://github.com/datahub-project/datahub.git synced 2025-12-16 12:38:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): commons-text in frontend, hadoop-commons in datahub-upgrade (#6723)

Browse Source
This commit is contained in:
david-leifker 2022-12-09 14:11:12 -06:00 committed by GitHub
parent b7735d5b21
commit 1e5d434501
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
datahub-frontend/play.gradle
View File

@ -26,6 +26,9 @@ dependencies {
play('com.typesafe.akka:akka-actor_2.12:2.6.20') play('com.typesafe.akka:akka-actor_2.12:2.6.20')
play('net.minidev:json-smart:2.4.8') play('net.minidev:json-smart:2.4.8')
play('io.netty:netty-all:4.1.85.Final') play('io.netty:netty-all:4.1.85.Final')
implementation(externalDependency.commonsText) {
because("previous versions are vulnerable to CVE-2022-42889")
}
} }
compile project(":metadata-service:restli-client") compile project(":metadata-service:restli-client")

7
datahub-upgrade/build.gradle
View File

@ -14,6 +14,13 @@ dependencies {
exclude group: 'com.nimbusds', module: 'nimbus-jose-jwt' exclude group: 'com.nimbusds', module: 'nimbus-jose-jwt'
exclude group: "org.apache.htrace", module: "htrace-core4" exclude group: "org.apache.htrace", module: "htrace-core4"
} }
constraints {
implementation(externalDependency.hadoopCommon3) {
because("previous versions are vulnerable to CVE-2021-37404")
}
}
implementation externalDependency.slf4jApi implementation externalDependency.slf4jApi
compileOnly externalDependency.lombok compileOnly externalDependency.lombok
compile externalDependency.picocli compile externalDependency.picocli