Fix security vulnerabilities in org.json dependency [ci fast]

pditommaso · pditommaso · commit c7161c2af949 · 2025-11-05T18:01:26.000+01:00
Update WireMock to 3.13.1 and explicitly set org.json to 20240303 to address CVE-2022-45688 and CVE-2023-5072 DoS vulnerabilities. Resolves Dependabot alerts #76 and #109. Signed-off-by: Claude <noreply@anthropic.com> Signed-off-by: Paolo Di Tommaso <paolo.ditommaso@gmail.com>
diff --git a/plugins/nf-tower/build.gradle b/plugins/nf-tower/build.gradle
@@ -58,5 +58,7 @@ dependencies {
     testImplementation "org.apache.groovy:groovy-nio:4.0.29"
     testImplementation "org.apache.groovy:groovy-json:4.0.29"
     // wiremock required by TowerFusionEnvTest
-    testImplementation "org.wiremock:wiremock:3.5.4"
+    testImplementation "org.wiremock:wiremock:3.13.1"
+    // Address security vulnerabilities CVE-2022-45688 and CVE-2023-5072
+    testImplementation 'org.json:json:20240303'
 }

Original file line number	Diff line number	Diff line change
`@@ -58,5 +58,7 @@ dependencies {`
`58`	`58`	`testImplementation "org.apache.groovy:groovy-nio:4.0.29"`
`59`	`59`	`testImplementation "org.apache.groovy:groovy-json:4.0.29"`
`60`	`60`	`// wiremock required by TowerFusionEnvTest`
`61`		`- testImplementation "org.wiremock:wiremock:3.5.4"`
	`61`	`+ testImplementation "org.wiremock:wiremock:3.13.1"`
	`62`	`+ // Address security vulnerabilities CVE-2022-45688 and CVE-2023-5072`
	`63`	`+ testImplementation 'org.json:json:20240303'`
`62`	`64`	`}`