Add a comment explaining why postgresql version is pinned

- Per PR review.
cloudfoundry · Feb 29, 2024 · cf82b50 · cf82b50
1 parent 52b3666
commit cf82b50
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/dependencies.gradle b/dependencies.gradle
@@ -71,7 +71,7 @@ libraries.mockito = "org.mockito:mockito-core"
 libraries.mockitoJunit5 = "org.mockito:mockito-junit-jupiter"
 libraries.passay = "org.passay:passay:1.6.4"
 libraries.beanutils = "commons-beanutils:commons-beanutils:1.9.4"
-libraries.postgresql = "org.postgresql:postgresql:42.3.9"
+libraries.postgresql = "org.postgresql:postgresql:42.3.9" // 42.3.8 has CVE-2024-1597
 libraries.selenium = "org.seleniumhq.selenium:selenium-java:${versions.seleniumVersion}"
 libraries.seleniumHttp = "org.seleniumhq.selenium:selenium-http-jdk-client:${versions.seleniumVersion}"
 libraries.slf4jApi = "org.slf4j:slf4j-api"