Skip to content

Commit 74a13e8

Browse files
authored
force runtime class path commons-beanutils:commons-beanutils:1.11.0 to avoid transitive dependency (opensearch-project#3935) (opensearch-project#3995)
(cherry picked from commit ab5f064) Signed-off-by: Brian Flores <[email protected]>
1 parent 01612e5 commit 74a13e8

File tree

2 files changed

+9
-1
lines changed

2 files changed

+9
-1
lines changed

ml-algorithms/build.gradle

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -104,7 +104,6 @@ configurations.all {
104104
resolutionStrategy.force 'commons-beanutils:commons-beanutils:1.11.0'
105105
}
106106

107-
108107
jacocoTestReport {
109108
reports {
110109
xml.getRequired().set(true)

plugin/build.gradle

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -690,3 +690,12 @@ forbiddenPatterns {
690690
exclude '**/*.pdf'
691691
exclude '**/*.jpg'
692692
}
693+
694+
configurations {
695+
runtimeClasspath {
696+
resolutionStrategy {
697+
// CVE-48734: tribuo-clustering-kmeans:'4.2.1 causes a transitive dependency on beanutils:1.94
698+
force 'commons-beanutils:commons-beanutils:1.11.0'
699+
}
700+
}
701+
}

0 commit comments

Comments
 (0)