CVE-2023-5072: Upgrading the org.json:json dependency (#1094)

GoogleCloudDataproc · Oct 19, 2023 · e9d1fef · e9d1fef
1 parent 425879c
commit e9d1fef
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/CHANGES.md b/CHANGES.md
@@ -2,6 +2,7 @@
 
 ## Next
 
+* PR #1094: CVE-2023-5072: Upgrading the org.json:json dependency
 * PR #1095: CVE-2023-4586: Upgrading the netty dependencies
 
 ## 0.33.0 - 2023-10-17

diff --git a/spark-bigquery-parent/pom.xml b/spark-bigquery-parent/pom.xml
@@ -278,6 +278,11 @@
  <version>2.5.2</version>
  <scope>provided</scope>
  </dependency>
+ <dependency>
+ <groupId>org.json</groupId>
+ <artifactId>json</artifactId>
+ <version>20231013</version>
+ </dependency>
  </dependencies>
  </dependencyManagement>
  <dependencies>