fix CVE-2024-26308, CVE-2024-25710

aleph0io · Jan 27, 2025 · 425629a · 425629a
1 parent ce98a46
commit 425629a
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -283,6 +283,14 @@
                 <artifactId>compile-testing</artifactId>
                 <version>0.21.0</version>
             </dependency>
+
+            <!-- SECURITY UPDATES -->
+            <!-- CVE-2024-26308, CVE-2024-25710 -->
+            <dependency>
+                <groupId>org.apache.commons</groupId>
+                <artifactId>commons-compress</artifactId>
+                <version>[1.26.0,)</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>