commenet to explain the override

akka · Nov 22, 2023 · 7d369b4 · 7d369b4
1 parent 2e02b6f
commit 7d369b4
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -164,7 +164,8 @@ object Dependencies {
   val AvroParquet = Seq(
     libraryDependencies ++= Seq(
         "org.apache.parquet" % "parquet-avro" % "1.13.1", //Apache2
-        "org.apache.avro" % "avro" % "1.11.3"
+        // override the version brought in by parquet-avro to fix CVE-2023-39410
+        "org.apache.avro" % "avro" % "1.11.3" //Apache2
       ),
 
   )