fix commons-beanutils (opensearch-project#3996)

jngz-es · web-flow · commit 01612e5aa520 · 2025-07-18T12:57:27.000-07:00
Signed-off-by: Jing Zhang &lt;jngz@amazon.com&gt;
diff --git a/ml-algorithms/build.gradle b/ml-algorithms/build.gradle
@@ -148,3 +148,12 @@ spotless {
         eclipse().withP2Mirrors(Map.of("https://download.eclipse.org/", "https://mirror.umd.edu/eclipse/")).configFile rootProject.file('.eclipseformat.xml')
     }
 }
+
+configurations {
+    runtimeClasspath {
+        resolutionStrategy {
+            // CVE-48734: tribuo-clustering-kmeans:'4.2.1 causes a transitive dependency on beanutils:1.94
+            force 'commons-beanutils:commons-beanutils:1.11.0'
+        }
+    }
+}

Original file line number	Diff line number	Diff line change
`@@ -148,3 +148,12 @@ spotless {`
`148`	`148`	`eclipse().withP2Mirrors(Map.of("https://download.eclipse.org/", "https://mirror.umd.edu/eclipse/")).configFile rootProject.file('.eclipseformat.xml')`
`149`	`149`	`}`
`150`	`150`	`}`
	`151`	`+`
	`152`	`+configurations {`
	`153`	`+ runtimeClasspath {`
	`154`	`+ resolutionStrategy {`
	`155`	`+ // CVE-48734: tribuo-clustering-kmeans:'4.2.1 causes a transitive dependency on beanutils:1.94`
	`156`	`+ force 'commons-beanutils:commons-beanutils:1.11.0'`
	`157`	`+ }`
	`158`	`+ }`
	`159`	`+}`