[PRODSEC-7375] activemq version bump, fixing CVE-2023-46604 (#883)

This commit is contained in:
kcichonczyk 2023-11-14 13:39:32 +01:00 committed by GitHub
parent 410f042be1
commit 40abaf3710
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

14
pom.xml
View File

@ -184,6 +184,20 @@
<artifactId>snakeyaml</artifactId>
<version>${dependency.snakeyaml.version}</version>
</dependency>
<!-- PRODSEC-7375 / CVE-2023-46604-->
<!-- Both dependencies can be removed once spring-boot-starter-activemq has secure versions of those dependencies-->
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-client</artifactId>
<version>5.18.3</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-client-jakarta</artifactId>
<version>5.18.3</version>
</dependency>
</dependencies>
</dependencyManagement>