Skip to content

Commit 5c6036f

Browse files
committed
fix: upgrade lz4-java to 1.8.1 to address CVE-2025-12183
Upgraded lz4-java dependency from 1.8.0 to 1.8.1 to fix security vulnerability. Resolves: CVE-2025-12183 Signed-off-by: Meenu Mariya <meenu.mariya@ibm.com>
1 parent 06b5e49 commit 5c6036f

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

pom.xml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -58,6 +58,11 @@
5858
<groupId>io.vertx</groupId>
5959
<artifactId>vertx-kafka-client</artifactId>
6060
</dependency>
61+
<dependency>
62+
<groupId>at.yawk.lz4</groupId>
63+
<artifactId>lz4-java</artifactId>
64+
<version>1.8.1</version>
65+
</dependency>
6166
<dependency>
6267
<groupId>io.vertx</groupId>
6368
<artifactId>vertx-config</artifactId>

0 commit comments

Comments
 (0)