Skip to content

Commit 963f130

Browse files
snpefkSpace Team
authored andcommitted
Enforce safe version of maven:commons-io:commons-io in libraries/tools
#KT-80213
1 parent 8577f06 commit 963f130

File tree

2 files changed

+24
-0
lines changed

2 files changed

+24
-0
lines changed

libraries/pom.xml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -110,6 +110,18 @@
110110
</dependency>
111111
</dependencies>
112112

113+
<dependencyManagement>
114+
<dependencies>
115+
<dependency>
116+
<!-- Force commons-io to 2.18.0 because of vulnerability -->
117+
<!-- KT-80213 Vulnerability in tools/kotlin-maven-plugin-test/pom.xml -->
118+
<groupId>commons-io</groupId>
119+
<artifactId>commons-io</artifactId>
120+
<version>2.18.0</version>
121+
</dependency>
122+
</dependencies>
123+
</dependencyManagement>
124+
113125
<build>
114126
<pluginManagement>
115127
<plugins>

repo/artifacts-tests/src/test/resources/org/jetbrains/kotlin/kotlin-project/kotlin-project.pom

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -110,6 +110,18 @@
110110
</dependency>
111111
</dependencies>
112112

113+
<dependencyManagement>
114+
<dependencies>
115+
<dependency>
116+
<!-- Force commons-io to 2.18.0 because of vulnerability -->
117+
<!-- KT-80213 Vulnerability in tools/kotlin-maven-plugin-test/pom.xml -->
118+
<groupId>commons-io</groupId>
119+
<artifactId>commons-io</artifactId>
120+
<version>2.18.0</version>
121+
</dependency>
122+
</dependencies>
123+
</dependencyManagement>
124+
113125
<build>
114126
<pluginManagement>
115127
<plugins>

0 commit comments

Comments
 (0)