Fix vulnerabilities CVE-2022-1471 (snakeyaml) and CVE-2023-44981 (zoo…

…keeper) along with some reported by dependabot
navikt · Nov 22, 2023 · 6c36c8d · 6c36c8d
1 parent fdfb6a7
commit 6c36c8d
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/build.gradle.kts b/build.gradle.kts
@@ -117,6 +117,22 @@ dependencies {
     testImplementation("com.h2database:h2:${Versions.h2Version}")
     testImplementation("io.mockk:mockk:${Versions.mockkVersion}")
     testImplementation("com.ninja-squad:springmockk:${Versions.springMockkVersion}")
+
+    constraints {
+        implementation("org.apache.zookeeper:zookeeper") {
+            because("CVE-2023-44981")
+            version {
+                require("3.9.1")
+            }
+        }
+
+        implementation("org.yaml:snakeyaml") {
+            because("CVE-2022-1471")
+            version {
+                require("2.2")
+            }
+        }
+    }
 }
 
 java.toolchain {