Skip to content

Commit aa85e2c

Browse files
committed
fix: upgrade lz4-java to 1.10.1
Upgraded lz4-java from 1.8.0 to 1.10.1 to address security vulnerabilities CVE-2025-12183 and CVE-2025-66566. Resolves: #379 Signed-off-by: Meenu Mariya <meenu.mariya@ibm.com>
1 parent 06b5e49 commit aa85e2c

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

pom.xml

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,17 @@
5757
<dependency>
5858
<groupId>io.vertx</groupId>
5959
<artifactId>vertx-kafka-client</artifactId>
60+
<exclusions>
61+
<exclusion>
62+
<groupId>org.lz4</groupId>
63+
<artifactId>lz4-java</artifactId>
64+
</exclusion>
65+
</exclusions>
66+
</dependency>
67+
<dependency>
68+
<groupId>at.yawk.lz4</groupId>
69+
<artifactId>lz4-java</artifactId>
70+
<version>1.10.1</version>
6071
</dependency>
6172
<dependency>
6273
<groupId>io.vertx</groupId>

0 commit comments

Comments
 (0)