From 0140f6c62c49bead1a36ff5060fd4640d65be431 Mon Sep 17 00:00:00 2001
From: Vihas Splunk <vhiteshbhai@splunk.com>
Date: Tue, 19 Mar 2024 15:51:35 +0530
Subject: [PATCH] fix: fix CVE-2023-3635 CVE-2024-25710 CVE-2024-26308

---
 pom.xml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 23c01907..4a7f58ed 100644
--- a/pom.xml
+++ b/pom.xml
@@ -210,7 +210,14 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-compress</artifactId>
-            <version>1.24.0</version>
+            <version>1.26.0</version>
+        </dependency>
+        <!-- https://mvnrepository.com/artifact/com.squareup.okio/okio-jvm -->
+        <dependency>
+            <groupId>com.squareup.okio</groupId>
+            <artifactId>okio-jvm</artifactId>
+            <version>3.4.0</version>
+            <scope>runtime</scope>
         </dependency>
 
     </dependencies>