chore(): bump beanutils version (#13656)

Co-authored-by: Esteban Gutierrez <esteban.gutierrez@acryl.io>
This commit is contained in:
david-leifker 2025-05-30 11:00:41 -05:00 committed by GitHub
parent ad84b0575c
commit 4145ff3d36
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 9 additions and 0 deletions

View File

@ -40,6 +40,9 @@ dependencies {
implementation(externalDependency.snappy) {
because("previous versions are vulnerable to CVE-2023-34453 through CVE-2023-34455")
}
implementation('commons-beanutils:commons-beanutils:1.11.0') {
because("CVE-2025-48734")
}
}
implementation project(":metadata-service:restli-client")

View File

@ -54,6 +54,9 @@ dependencies {
implementation('dnsjava:dnsjava:3.6.1') {
because("CVE-2024-25638")
}
implementation('commons-beanutils:commons-beanutils:1.11.0') {
because("CVE-2025-48734")
}
}

View File

@ -19,4 +19,7 @@ repositories {
dependencies {
implementation 'org.apache.spark:spark-sql_2.11:2.4.8'
implementation('commons-beanutils:commons-beanutils:1.11.0') {
because("CVE-2025-48734")
}
}