diff --git a/build.gradle b/build.gradle index 55048fff11..4d51229642 100644 --- a/build.gradle +++ b/build.gradle @@ -154,9 +154,9 @@ subprojects { } implementation('org.xerial.snappy:snappy-java') { version { - require '1.1.10.1' + require '1.1.10.5' } - because 'Fixes CVE-2023-35165, CVE-2023-34455, CVE-2023-34453, CVE-2023-34454, CVE-2023-2976' + because 'Fixes CVE-2023-43642' } implementation('com.squareup.okio:okio-jvm') { version { @@ -182,6 +182,12 @@ subprojects { } because 'CVE from transitive dependencies' } + implementation('org.json:json') { + version { + require '20230618' + } + because 'CVE from transitive dependencies' + } } }