Skip to content

Commit b18bd44

Browse files
committed
Address bounce castle cve alert
chore: Update bouncy castle depdendency to address the following vulnerability: - [CVE-2023-33201](https://nvd.nist.gov/vuln/detail/CVE-2023-33201): Bouncy Castle For Java LDAP injection vulnerability Signed-off-by: Spolti <[email protected]>
1 parent c1fb9fb commit b18bd44

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

pom.xml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,7 @@
7474
<!-- Care must be taken when updating the prometheus client lib version
7575
since we have some custom optimized extensions to this -->
7676
<prometheus-version>0.9.0</prometheus-version>
77-
<bouncycastle-version>1.70</bouncycastle-version>
77+
<bouncycastle-version>1.74</bouncycastle-version>
7878
<junit-version>5.9.3</junit-version>
7979

8080
<dockerhome>${project.build.directory}/dockerhome</dockerhome>
@@ -450,7 +450,7 @@
450450
generate a self-signed server certificate -->
451451
<dependency>
452452
<groupId>org.bouncycastle</groupId>
453-
<artifactId>bcpkix-jdk15on</artifactId>
453+
<artifactId>bcpkix-jdk18on</artifactId>
454454
<version>${bouncycastle-version}</version>
455455
</dependency>
456456

0 commit comments

Comments
 (0)