YARN-11611. Remove json-io to 4.14.1 due to CVE-2023-34610 (#6257)

Co-authored-by: Benjamin Teke <[email protected]>
apache · Nov 27, 2023 · d72cdf7 · d72cdf7
1 parent 8a610e6
commit d72cdf7
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/...oject/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice/pom.xml b/...oject/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice/pom.xml
@@ -229,6 +229,10 @@
           <groupId>org.javassist</groupId>
           <artifactId>javassist</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>com.cedarsoftware</groupId>
+          <artifactId>java-util</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
   </dependencies>