Merge pull request #427 from splunk/fix-vulnerabilites

fix: fix CVE-2023-3635 CVE-2024-25710 CVE-2024-26308
splunk · Mar 19, 2024 · 06afc55 · 06afc55
2 parents 755f97d + 0140f6c
commit 06afc55
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/pom.xml b/pom.xml
@@ -210,7 +210,14 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-compress</artifactId>
-            <version>1.24.0</version>
+            <version>1.26.0</version>
+        </dependency>
+        <!-- https://mvnrepository.com/artifact/com.squareup.okio/okio-jvm -->
+        <dependency>
+            <groupId>com.squareup.okio</groupId>
+            <artifactId>okio-jvm</artifactId>
+            <version>3.4.0</version>
+            <scope>runtime</scope>
         </dependency>
 
     </dependencies>