Skip to content

Commit 8de166c

Browse files
Override transitive dependency on Guava
1 parent 7486907 commit 8de166c

File tree

1 file changed

+9
-2
lines changed

1 file changed

+9
-2
lines changed

build.gradle

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,13 @@ buildscript {
22
dependencies {
33
classpath "org.kohsuke:github-api:1.330"
44
}
5+
6+
configurations.classpath {
7+
resolutionStrategy {
8+
// v28.0-jre, used by fabric-loom 1.13.3, is vulnerable to CVE-2020-8908 and CVE-2023-2976
9+
force "com.google.guava:guava:32.0.1-jre"
10+
}
11+
}
512
}
613

714
plugins {
@@ -61,8 +68,8 @@ dependencies {
6168
// In other words, Wurst won't compile without this library,
6269
// even though it's Minecraft that actually uses it.
6370
modImplementation "com.google.code.findbugs:jsr305:3.0.2"
64-
}
65-
71+
}
72+
6673
loom {
6774
accessWidenerPath = file("src/main/resources/wurst.accesswidener")
6875
}

0 commit comments

Comments
 (0)