Skip to content

Commit 9f9bd80

Browse files
Update overrides for vulnerable Minecraft dependencies
1 parent 12a1ae1 commit 9f9bd80

1 file changed

Lines changed: 7 additions & 5 deletions

File tree

build.gradle

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,16 +43,18 @@ repositories {
4343
// Override vulnerable dependencies until Minecraft updates to newer versions
4444
configurations.all {
4545
resolutionStrategy {
46-
// v2.5.1, used by Minecraft 1.21.4 - 1.21.8, is vulnerable to CVE-2024-57699
46+
// v2.5.1, used by Minecraft 1.21.4 - 1.21.10, is vulnerable to CVE-2024-57699
4747
force "net.minidev:json-smart:2.5.2"
48-
// v2.13.4, used by Minecraft 1.21.4 - 1.21.8, is vulnerable to CVE-2025-52999
48+
// v2.13.4, used by Minecraft 1.21.4 - 1.21.10, is vulnerable to CVE-2025-52999
4949
force "com.fasterxml.jackson.core:jackson-core:2.15.0"
50-
// v3.17.0, used by Minecraft 1.21.4 - 1.21.8, is vulnerable to CVE-2025-48924
50+
// v3.17.0, used by Minecraft 1.21.4 - 1.21.10, is vulnerable to CVE-2025-48924
5151
force "org.apache.commons:commons-lang3:3.18.0"
52-
// v9.40, used by Minecraft 1.21.4 - 1.21.8, is vulnerable to CVE-2025-53864
52+
// v9.40, used by Minecraft 1.21.4 - 1.21.10, is vulnerable to CVE-2025-53864
5353
force "com.nimbusds:nimbus-jose-jwt:10.0.2"
54-
// v4.1.118.Final, used by Minecraft 1.21.5 - 1.21.8, is vulnerable to CVE-2025-58057
54+
// v4.1.118.Final, used by Minecraft 1.21.5 - 1.21.10, is vulnerable to CVE-2025-58057
5555
force "io.netty:netty-codec:4.1.125.Final"
56+
// v4.1.118.Final, used by Minecraft 1.21.5 - 1.21.10, is vulnerable to CVE-2025-58056
57+
force "io.netty:netty-codec-http:4.1.125.Final"
5658
}
5759
}
5860

0 commit comments

Comments
 (0)