Fix commons-compress CVE (#4172) (#4198)

Signed-off-by: Asif Sohail Mohammed <[email protected]> (cherry picked from commit a0b6f25) Co-authored-by: Asif Sohail Mohammed <[email protected]>
opensearch-project · Mar 7, 2024 · 2f136d5 · 2f136d5
1 parent 221566f
commit 2f136d5
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -224,6 +224,12 @@ subprojects {
                 }
                 because 'CVE-2023-5072, CVE from transitive dependencies'
             }
+            implementation('org.apache.commons:commons-compress') {
+                version {
+                    require '1.26.0'
+                }
+                because 'CVE-2024-25710, CVE-2024-26308'
+            }
         }
     }