Fixes -CVE-2024-47554

Signed-off-by: Gagan Juneja <gjjuneja@amazon.com>
opensearch-project · Dec 11, 2024 · 618e220 · 618e220
1 parent 604c734
commit 618e220
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/build.gradle b/build.gradle
@@ -334,7 +334,7 @@ dependencies {
     compile group: 'org.apache.logging.log4j', name: 'log4j-api', version: "${log4jVersion}"
     compile group: 'org.apache.logging.log4j', name: 'log4j-core', version: "${log4jVersion}"
     compile group: 'org.apache.commons', name: 'commons-lang3', version: '3.12'
-    compile group: 'commons-io', name: 'commons-io', version: '2.17.0'
+    compile group: 'commons-io', name: 'commons-io', version: '2.16.0'
     compile group: 'com.google.errorprone', name: 'error_prone_annotations', version: '2.9.0'
     compile group: 'com.google.protobuf', name: 'protobuf-java', version: '3.21.8'
     implementation 'io.grpc:grpc-netty:1.56.1'