Override vulnerable msal4j dependency

Wurst-Imperium · Nov 6, 2024 · 12f4bd7 · 12f4bd7
1 parent d82b3bc
commit 12f4bd7
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -29,6 +29,14 @@ repositories {
 	maven {url "https://maven.terraformersmc.com/releases/"}
 }
 
+// Override vulnerable msal4j dependency until Minecraft updates to a newer version
+configurations.all {
+	resolutionStrategy {
+		// v1.15.0, used by Minecraft 1.21.2 and 1.21.3, is vulnerable to CVE-2024-35255
+		force 'com.microsoft.azure:msal4j:1.17.2'
+	}
+}
+
 dependencies {
 	// To change the versions see the gradle.properties file
 	minecraft "com.mojang:minecraft:${project.minecraft_version}"