[Dependency upgrade] Fix jdom2 CVE violation (opensearch-project#3509)

Signed-off-by: Suraj Singh <[email protected]>
reta · Jun 7, 2022 · faba9f5 · faba9f5
1 parent 083d717
commit faba9f5
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/buildSrc/build.gradle b/buildSrc/build.gradle
@@ -131,6 +131,9 @@ dependencies {
     runtimeOnly("org.apache.logging.log4j:log4j-core:${props.getProperty('log4j')}") {
       because 'log4j CVE'
     }
+    runtimeOnly("org.jdom:jdom2:${props.getProperty('jdom2')}") {
+      because 'CVE-2021-33813 violation'
+    }
   }
 }
 

diff --git a/buildSrc/version.properties b/buildSrc/version.properties
@@ -16,6 +16,7 @@ icu4j             = 62.1
 supercsv          = 2.4.0
 log4j             = 2.17.1
 slf4j             = 1.6.2
+jdom2             = 2.0.6.1
 
 # when updating the JNA version, also update the version in buildSrc/build.gradle
 jna               = 5.5.0