CVE fixes, closes #133

kafbat · Mar 2, 2024 · e8830fc · e8830fc
1 parent cefa86b
commit e8830fc
Show file tree

Hide file tree

Showing 2 changed files with 25 additions and 2 deletions.
diff --git a/api/pom.xml b/api/pom.xml
@@ -253,6 +253,27 @@
             <groupId>dev.cel</groupId>
             <artifactId>cel</artifactId>
         </dependency>
+<!--        CVE fixes -->
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-classic</artifactId>
+            <version>${logback.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-core</artifactId>
+            <version>${logback.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>com.squareup.okhttp3</groupId>
+            <artifactId>logging-interceptor</artifactId>
+            <version>${squareup.okhttp3.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-compress</artifactId>
+            <version>${commons.compress.version}</version>
+        </dependency>
 
     </dependencies>
 

diff --git a/pom.xml b/pom.xml
@@ -51,11 +51,13 @@
         <org.json.version>20231013</org.json.version>
         <dev.cel.version>0.3.0</dev.cel.version>
         <guava.version>33.0.0-jre</guava.version>
-
+        <commons.compress.version>1.26.0</commons.compress.version>
+        <logback.version>1.4.12</logback.version>
+        <squareup.okhttp3.version>4.12.0</squareup.okhttp3.version>
         <!-- Test dependency versions -->
         <junit.version>5.9.1</junit.version>
         <mockito.version>5.3.1</mockito.version>
-        <okhttp3.mockwebserver.version>4.10.0</okhttp3.mockwebserver.version>
+        <okhttp3.mockwebserver.version>4.12.0</okhttp3.mockwebserver.version>
         <testcontainers.version>1.19.5</testcontainers.version>
 
         <!-- Frontend dependency versions -->