Skip to content

Commit 987787a

Browse files
manas-ctdsmanas-ctds
authored
Upgrade dependencies to resolve vulnerabilities (#125)
* Upgrade dependencies * Upgrade commons-compress and io * Add commons-codec explicitly to avoid ClassNotFoundException * Upgrade netty dependencies to resolve the remaining vulnerabilities
1 parent 4d7570f commit 987787a

5 files changed

Lines changed: 82 additions & 4 deletions

File tree

‎pom.xml‎

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,9 +51,13 @@
5151
<tomcat-embed-el.version>10.1.4</tomcat-embed-el.version>
5252
<commons-collections4.version>4.4</commons-collections4.version>
5353
<commons-lang3.version>3.18.0</commons-lang3.version>
54+
<commons-compress.version>1.26.0</commons-compress.version>
55+
<commons-io.version>2.14.0</commons-io.version>
5456
<asynchttpclient.version>2.12.4</asynchttpclient.version>
5557
<aircompressor.version>0.27</aircompressor.version>
5658
<jackson.version>2.15.4</jackson.version>
59+
<snakeyaml.version>2.0</snakeyaml.version>
60+
<netty.version>4.1.129.Final</netty.version>
5761
</properties>
5862
<modules>
5963
<module>streaming-ai</module>
@@ -139,6 +143,21 @@
139143
<artifactId>commons-collections4</artifactId>
140144
<version>${commons-collections4.version}</version>
141145
</dependency>
146+
<dependency>
147+
<groupId>org.apache.commons</groupId>
148+
<artifactId>commons-lang3</artifactId>
149+
<version>${commons-lang3.version}</version>
150+
</dependency>
151+
<dependency>
152+
<groupId>com.fasterxml.jackson.dataformat</groupId>
153+
<artifactId>jackson-dataformat-yaml</artifactId>
154+
<version>${jackson.version}</version>
155+
</dependency>
156+
<dependency>
157+
<groupId>com.fasterxml.jackson.core</groupId>
158+
<artifactId>jackson-core</artifactId>
159+
<version>${jackson.version}</version>
160+
</dependency>
142161
<!-- Override transitive dependency version to fix vulnerability -->
143162
<dependency>
144163
<groupId>io.airlift</groupId>
@@ -153,6 +172,55 @@
153172
<version>${asynchttpclient.version}</version>
154173
<scope>runtime</scope>
155174
</dependency>
175+
<!-- Override transitive dependency version to fix vulnerability -->
176+
<dependency>
177+
<groupId>org.yaml</groupId>
178+
<artifactId>snakeyaml</artifactId>
179+
<version>${snakeyaml.version}</version>
180+
<scope>runtime</scope>
181+
</dependency>
182+
<!-- Override transitive dependency version to fix vulnerability -->
183+
<dependency>
184+
<groupId>org.apache.commons</groupId>
185+
<artifactId>commons-compress</artifactId>
186+
<version>${commons-compress.version}</version>
187+
<scope>runtime</scope>
188+
</dependency>
189+
<!-- Override transitive dependency version to fix vulnerability -->
190+
<dependency>
191+
<groupId>commons-io</groupId>
192+
<artifactId>commons-io</artifactId>
193+
<version>${commons-io.version}</version>
194+
<scope>runtime</scope>
195+
</dependency>
196+
<!-- Override transitive dependency version to fix vulnerability -->
197+
<dependency>
198+
<groupId>io.netty</groupId>
199+
<artifactId>netty-codec-http2</artifactId>
200+
<version>${netty.version}</version>
201+
<scope>runtime</scope>
202+
</dependency>
203+
<!-- Override transitive dependency version to fix vulnerability -->
204+
<dependency>
205+
<groupId>io.netty</groupId>
206+
<artifactId>netty-codec-http</artifactId>
207+
<version>${netty.version}</version>
208+
<scope>runtime</scope>
209+
</dependency>
210+
<!-- Override transitive dependency version to fix vulnerability -->
211+
<dependency>
212+
<groupId>io.netty</groupId>
213+
<artifactId>netty-common</artifactId>
214+
<version>${netty.version}</version>
215+
<scope>runtime</scope>
216+
</dependency>
217+
<!-- Override transitive dependency version to fix vulnerability -->
218+
<dependency>
219+
<groupId>io.netty</groupId>
220+
<artifactId>netty-handler</artifactId>
221+
<version>${netty.version}</version>
222+
<scope>runtime</scope>
223+
</dependency>
156224
</dependencies>
157225
</dependencyManagement>
158226
<build>

‎pulsar-ai-tools/pom.xml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -80,6 +80,13 @@
8080
<groupId>org.mockito</groupId>
8181
<artifactId>mockito-inline</artifactId>
8282
</dependency>
83+
<!-- Resolve java.lang.ClassNotFoundException: io.netty.handler.codec.DefaultHeaders$ValueValidator -->
84+
<dependency>
85+
<groupId>io.netty</groupId>
86+
<artifactId>netty-codec</artifactId>
87+
<version>${netty.version}</version>
88+
<scope>test</scope>
89+
</dependency>
8390
</dependencies>
8491
<build>
8592
<plugins>

‎pulsar-transformations/pom.xml‎

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -80,7 +80,6 @@
8080
<dependency>
8181
<groupId>org.apache.commons</groupId>
8282
<artifactId>commons-lang3</artifactId>
83-
<version>${commons-lang3.version}</version>
8483
</dependency>
8584
<dependency>
8685
<groupId>com.networknt</groupId>
@@ -89,7 +88,6 @@
8988
<dependency>
9089
<groupId>com.fasterxml.jackson.dataformat</groupId>
9190
<artifactId>jackson-dataformat-yaml</artifactId>
92-
<version>${jackson.version}</version>
9391
</dependency>
9492
<dependency>
9593
<groupId>com.azure</groupId>

‎streaming-ai/pom.xml‎

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,6 @@
6868
<dependency>
6969
<groupId>org.apache.commons</groupId>
7070
<artifactId>commons-lang3</artifactId>
71-
<version>${commons-lang3.version}</version>
7271
</dependency>
7372
<dependency>
7473
<groupId>com.networknt</groupId>
@@ -77,7 +76,6 @@
7776
<dependency>
7877
<groupId>com.fasterxml.jackson.dataformat</groupId>
7978
<artifactId>jackson-dataformat-yaml</artifactId>
80-
<version>${jackson.version}</version>
8179
</dependency>
8280
<dependency>
8381
<groupId>com.azure</groupId>

‎tests/pom.xml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -50,6 +50,13 @@
5050
<artifactId>testng</artifactId>
5151
<scope>test</scope>
5252
</dependency>
53+
<!-- Resolve java.lang.ClassNotFoundException: org.apache.commons.codec.Charsets -->
54+
<dependency>
55+
<groupId>commons-codec</groupId>
56+
<artifactId>commons-codec</artifactId>
57+
<version>1.16.1</version>
58+
<scope>test</scope>
59+
</dependency>
5360
</dependencies>
5461
<build>
5562
<plugins>

0 commit comments

Comments
 (0)