[Backport 1.3] Fixes CVE-2022-42920 by forcing bcel version to resovl…

…e to 6.6 (#2304) Signed-off-by: Craig Perkins <[email protected]>
opensearch-project · Dec 7, 2022 · aea96f2 · aea96f2
1 parent 64ebd9e
commit aea96f2
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -86,6 +86,7 @@ configurations.all {
         force "com.google.guava:guava:30.0-jre"
         force "com.fasterxml.woodstox:woodstox-core:6.4.0"
         force "org.scala-lang:scala-library:2.13.9"
+        force "org.apache.bcel:bcel:6.6.0" // This line should be removed once Spotbugs is upgraded to 4.7.4
     }
 }