update constraint

DibyojyotiS · DibyojyotiS · commit d4007354c12d · 2025-12-15T23:01:08.000+05:30
diff --git a/kafka-bom/build.gradle.kts b/kafka-bom/build.gradle.kts
@@ -25,9 +25,9 @@ dependencies {
     api("org.apache.commons:commons-lang3:3.18.0") {
       because("CVE-2025-48924 is fixed in 3.18.0")
     }
-    api("org.lz4:lz4-java:1.8.1") {
-      because("[https://nvd.nist.gov/vuln/detail/CVE-2025-12183] in org.lz4:lz4-java:1.8.0")
-      because("CVE-2025-12183 is fixed in 1.8.1")
+    api("at.yawk.lz4:lz4-java:1.10.1") {
+      because("[https://nvd.nist.gov/vuln/detail/CVE-2025-66566] in at.yawk.lz4:lz4-java (lz4-java-1.8.1.jar)")
+      because("CVE-2025-66566 is fixed in 1.8.1")
     }
 
     api("io.confluent:kafka-streams-avro-serde:$confluentVersion")

Original file line number	Diff line number	Diff line change
`@@ -25,9 +25,9 @@ dependencies {`
`25`	`25`	`api("org.apache.commons:commons-lang3:3.18.0") {`
`26`	`26`	`because("CVE-2025-48924 is fixed in 3.18.0")`
`27`	`27`	`}`
`28`		`- api("org.lz4:lz4-java:1.8.1") {`
`29`		`- because("[https://nvd.nist.gov/vuln/detail/CVE-2025-12183] in org.lz4:lz4-java:1.8.0")`
`30`		`- because("CVE-2025-12183 is fixed in 1.8.1")`
	`28`	`+ api("at.yawk.lz4:lz4-java:1.10.1") {`
	`29`	`+ because("[https://nvd.nist.gov/vuln/detail/CVE-2025-66566] in at.yawk.lz4:lz4-java (lz4-java-1.8.1.jar)")`
	`30`	`+ because("CVE-2025-66566 is fixed in 1.8.1")`
`31`	`31`	`}`
`32`	`32`
`33`	`33`	`api("io.confluent:kafka-streams-avro-serde:$confluentVersion")`