[1.x] Fixes CVE-2022-46363 (#2349) (#2351)

* Update cxf-core to 3.5.5 Signed-off-by: Stephen Crawford <[email protected]> (cherry picked from commit 8b907c4) Co-authored-by: Stephen Crawford <[email protected]> Co-authored-by: Darshit Chanpura <[email protected]>
opensearch-project · Dec 16, 2022 · 9c20990 · 9c20990
1 parent f48fcdc
commit 9c20990
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -4,7 +4,7 @@
 
 # OpenSearch Security Plugin
 
-OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. When combined with OpenSearch Security-Advanced Modules, it supports authentication via Active Directory, LDAP, Kerberos, JSON web tokens, SAML, OpenID and more. It includes fine grained role-based access control to indices, documents and fields. It also provides multi-tenancy support in OpenSearch Dashboards.
+OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. When combined with OpenSearch Security-Advanced Modules, it supports authentication via Active Directory, LDAP, Kerberos, JSON web tokens, SAML, OpenID and more. It includes fine-grained role-based access control to indices, documents and fields. It also provides multi-tenancy support in OpenSearch Dashboards.
 
 - [Features](#features)
 - [Installation](#installation)

diff --git a/build.gradle b/build.gradle
@@ -102,7 +102,7 @@ dependencies {
     implementation 'org.ldaptive:ldaptive:1.2.3'
     implementation 'org.apache.httpcomponents:httpclient-cache:4.5.13'
     implementation 'io.jsonwebtoken:jjwt-api:0.10.8'
-    implementation("org.apache.cxf:cxf-rt-rs-security-jose:3.4.5") {
+    implementation("org.apache.cxf:cxf-rt-rs-security-jose:3.5.5") {
         exclude(group: 'jakarta.activation', module: 'jakarta.activation-api')
     }
     implementation 'com.github.wnameless:json-flattener:0.5.0'