PRODSEC-11512 security update bumped plexus-utils 4.0.3 (#1226)

This commit is contained in:
Sayan Bhattacharya
2026-04-08 19:58:37 +05:30
committed by GitHub
parent 059e0d80b7
commit 122c1463c8
+14
View File
@@ -35,6 +35,20 @@
<groupId>org.apache.maven</groupId>
<artifactId>maven-artifact</artifactId>
<version>3.9.6</version>
<exclusions>
<exclusion>
<groupId>org.codehaus.plexus</groupId>
<artifactId>plexus-utils</artifactId>
</exclusion>
</exclusions>
</dependency>
<!-- Override plexus-utils version to 4.0.3 to avoid CVE-2025-67030.
The transitive version from maven-artifact is vulnerable.
This can be removed once maven-artifact uses a secure version. -->
<dependency>
<groupId>org.codehaus.plexus</groupId>
<artifactId>plexus-utils</artifactId>
<version>4.0.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>