Skip to content

Commit 343655c

Browse files
author
Corneil du Plessis
committed
Update WSS4J version to 2.4.3 and guava to 32.1.3-jre
1 parent f9f2976 commit 343655c

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

pom.xml

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -136,13 +136,14 @@
136136
<stax.version>2.0.1</stax.version>
137137
<woodstox.version>6.5.1</woodstox.version>
138138
<wsdl4j.version>1.6.3</wsdl4j.version>
139-
<wss4j.version>2.4.1</wss4j.version>
139+
<wss4j.version>2.4.3</wss4j.version>
140140
<wss4j-next.version>3.0.0</wss4j-next.version>
141141
<xmlsec.version>3.0.3</xmlsec.version>
142142
<xml-schema-core.version>2.2.2</xml-schema-core.version>
143143
<xmlunit1.version>1.6</xmlunit1.version>
144144
<xmlunit.version>2.9.0</xmlunit.version>
145145
<xom.version>1.3.7</xom.version>
146+
<bouncycastle.version>1.77</bouncycastle.version>
146147
<spring-asciidoctor-backends.version>0.0.3</spring-asciidoctor-backends.version>
147148
</properties>
148149

@@ -179,6 +180,12 @@
179180
<type>pom</type>
180181
<scope>import</scope>
181182
</dependency>
183+
<!-- Addressing CVE-2018-10237, CVE-2023-2976, CVE-2020-8908 -->
184+
<dependency>
185+
<groupId>com.google.guava</groupId>
186+
<artifactId>guava</artifactId>
187+
<version>32.1.3-jre</version>
188+
</dependency>
182189

183190
</dependencies>
184191
</dependencyManagement>

0 commit comments

Comments
 (0)