Merge remote-tracking branch 'origin/fix/PRODSEC-9150-snappy-vulnerability' into fix/PRODSEC-9150-snappy-vulnerability

[PRODSEC-9150] fix for snappy vulnerability
Fix/prodsec 8957 spring context vulnerability (#674 )
2026-09-16 18:13:23 +00:00 · 2024-06-17 14:26:57 +05:30 · 2024-06-17 14:26:05 +05:30 · 2024-06-17 11:16:44 +05:30 · 2024-06-17 10:41:50 +05:30
2 changed files with 12 additions and 1 deletions
@@ -38,7 +38,7 @@
        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-context</artifactId>
-            <version>3.2.17.RELEASE</version>
+            <version>5.3.37</version>
        </dependency>

        <!-- Access to JUnit runner classes -->
@@ -93,6 +93,17 @@
            <groupId>org.codehaus.plexus</groupId>
            <artifactId>plexus-archiver</artifactId>
            <version>4.9.2</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.iq80.snappy</groupId>
+                    <artifactId>snappy</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>org.iq80.snappy</groupId>
+            <artifactId>snappy</artifactId>
+            <version>0.5</version>
        </dependency>
        <dependency>
            <groupId>org.apache.maven</groupId>
Author	SHA1	Message	Date
pmm	a84410ae98	Merge remote-tracking branch 'origin/fix/PRODSEC-9150-snappy-vulnerability' into fix/PRODSEC-9150-snappy-vulnerability	2024-06-17 14:26:57 +05:30
pmm	f7e940c25e	[PRODSEC-9150] fix for snappy vulnerability	2024-06-17 14:26:05 +05:30
purusothaman-mm	459e3f1424	Fix/prodsec 8957 spring context vulnerability (#674 ) * [PRODSEC-8957] fix for spring-context * [PRODSEC-8957] fix for spring-context * [PRODSEC-8957] fix for spring-context * [PRODSEC-8957] fix for spring-context	2024-06-17 11:16:44 +05:30
pmm	a5bf649afb	[PRODSEC-9150] fix for snappy vulnerability	2024-06-17 10:41:50 +05:30