Skip to content

Commit 1cbec9a

Browse files
Override Nimbuse Jose and Commons Compress Versions
Fixes: #461
1 parent b4c728f commit 1cbec9a

File tree

1 file changed

+15
-1
lines changed

1 file changed

+15
-1
lines changed

pom.xml

Lines changed: 15 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,21 @@
6767
<version>${Hapi.version}</version>
6868
</dependency>
6969

70-
<!-- Overriding apache commons that comes from hapi and causes a vulnerability in the older version -->
70+
<!-- Overriding apache commons compress that comes from the maven dependency tree and causes a vulnerability in the older version -->
71+
<dependency>
72+
<groupId>org.apache.commons</groupId>
73+
<artifactId>commons-compress</artifactId>
74+
<version>1.28.0</version>
75+
</dependency>
76+
77+
<!-- Overriding nimbus jose jwt that comes from the maven dependency tree and causes a vulnerability in the older version -->
78+
<dependency>
79+
<groupId>com.nimbusds</groupId>
80+
<artifactId>nimbus-jose-jwt</artifactId>
81+
<version>10.4.2</version>
82+
</dependency>
83+
84+
<!-- Overriding apache commons lang that comes from hapi and causes a vulnerability in the older version -->
7185
<dependency>
7286
<groupId>org.apache.commons</groupId>
7387
<artifactId>commons-lang3</artifactId>

0 commit comments

Comments
 (0)