Merge pull request #15751 from h2oai/mn/GH-15750

[GH-15750] Upgrade json-smart to Address CVE-2023-1370 in Main Standalone Jar
h2oai · Sep 13, 2023 · 0ccb135 · 0ccb135
2 parents 1f7eca8 + 606daab
commit 0ccb135
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/h2o-assemblies/main/build.gradle b/h2o-assemblies/main/build.gradle
@@ -51,6 +51,9 @@ dependencies {
         api('com.fasterxml.jackson.core:jackson-databind:2.13.4.2') {
             because 'Fixes CVE-2022-42003'
         }
+        api('net.minidev:json-smart:2.4.10') {
+            because 'Fixes CVE-2023-1370'
+        }
         api('com.google.guava:guava:32.0.1-jre') {
             because 'Fixes CVE-2023-2976'
             because 'Fixes CVE-2020-8908'