Bump json version to address CVE-2023-5072 (#1551) (#1569)

opensearch-trigger-bot[bot] · rbhavna · web-flow · commit 1a31c5fcfc9b · 2023-10-30T14:10:52.000-07:00
Signed-off-by: Bhavana Ramaram <rbhavna@amazon.com> (cherry picked from commit 8c3e453) Co-authored-by: Bhavana Ramaram <rbhavna@amazon.com>
diff --git a/common/build.gradle b/common/build.gradle
@@ -20,7 +20,7 @@ dependencies {
 
     compileOnly group: 'org.apache.commons', name: 'commons-text', version: '1.10.0'
     compileOnly group: 'com.google.code.gson', name: 'gson', version: '2.10.1'
-    compileOnly group: 'org.json', name: 'json', version: '20230227'
+    compileOnly group: 'org.json', name: 'json', version: '20231013'
 }
 
 jacocoTestReport {
diff --git a/ml-algorithms/build.gradle b/ml-algorithms/build.gradle
@@ -63,7 +63,7 @@ dependencies {
     implementation 'software.amazon.awssdk:apache-client'
     implementation 'com.amazonaws:aws-encryption-sdk-java:2.4.1'
     implementation 'com.jayway.jsonpath:json-path:2.8.0'
-    implementation group: 'org.json', name: 'json', version: '20230227'
+    implementation group: 'org.json', name: 'json', version: '20231013'
 }
 
 configurations.all {
diff --git a/search-processors/build.gradle b/search-processors/build.gradle
@@ -39,7 +39,7 @@ dependencies {
     // https://mvnrepository.com/artifact/org.apache.httpcomponents.core5/httpcore5
     implementation group: 'org.apache.httpcomponents.core5', name: 'httpcore5', version: '5.2.1'
     implementation("com.google.guava:guava:32.0.1-jre")
-    implementation group: 'org.json', name: 'json', version: '20230227'
+    implementation group: 'org.json', name: 'json', version: '20231013'
     implementation group: 'org.apache.commons', name: 'commons-text', version: '1.10.0'
     testImplementation "org.opensearch.test:framework:${opensearch_version}"
 }

Original file line number	Diff line number	Diff line change
`@@ -20,7 +20,7 @@ dependencies {`
`20`	`20`
`21`	`21`	`compileOnly group: 'org.apache.commons', name: 'commons-text', version: '1.10.0'`
`22`	`22`	`compileOnly group: 'com.google.code.gson', name: 'gson', version: '2.10.1'`
`23`		`- compileOnly group: 'org.json', name: 'json', version: '20230227'`
	`23`	`+ compileOnly group: 'org.json', name: 'json', version: '20231013'`
`24`	`24`	`}`
`25`	`25`
`26`	`26`	`jacocoTestReport {`
Original file line number	Diff line number	Diff line change
`@@ -63,7 +63,7 @@ dependencies {`
`63`	`63`	`implementation 'software.amazon.awssdk:apache-client'`
`64`	`64`	`implementation 'com.amazonaws:aws-encryption-sdk-java:2.4.1'`
`65`	`65`	`implementation 'com.jayway.jsonpath:json-path:2.8.0'`
`66`		`- implementation group: 'org.json', name: 'json', version: '20230227'`
	`66`	`+ implementation group: 'org.json', name: 'json', version: '20231013'`
`67`	`67`	`}`
`68`	`68`
`69`	`69`	`configurations.all {`
Original file line number	Diff line number	Diff line change
`@@ -39,7 +39,7 @@ dependencies {`
`39`	`39`	`// https://mvnrepository.com/artifact/org.apache.httpcomponents.core5/httpcore5`
`40`	`40`	`implementation group: 'org.apache.httpcomponents.core5', name: 'httpcore5', version: '5.2.1'`
`41`	`41`	`implementation("com.google.guava:guava:32.0.1-jre")`
`42`		`- implementation group: 'org.json', name: 'json', version: '20230227'`
	`42`	`+ implementation group: 'org.json', name: 'json', version: '20231013'`
`43`	`43`	`implementation group: 'org.apache.commons', name: 'commons-text', version: '1.10.0'`
`44`	`44`	`testImplementation "org.opensearch.test:framework:${opensearch_version}"`
`45`	`45`	`}`