Updates Rhino to 1.7.15.1. Fixes CVE-2025-66453. (#6519) (#6522)

opensearch-trigger-bot[bot] · dlvenable · web-flow · commit bbe60e830f7c · 2026-02-16T10:47:47.000-08:00
(cherry picked from commit 77449a9) Signed-off-by: David Venable <dlv@amazon.com> Co-authored-by: David Venable <dlv@amazon.com>
diff --git a/data-prepper-plugins/kafka-plugins/build.gradle b/data-prepper-plugins/kafka-plugins/build.gradle
@@ -87,9 +87,9 @@ dependencies {
     constraints {
         implementation('org.mozilla:rhino') {
             version {
-                require '1.7.12'
+                require '1.7.15.1'
             }
-            because 'Fixes SNYK-JAVA-ORGMOZILLA-1314295.'
+            because 'Fixes CVE-2025-66453, SNYK-JAVA-ORGMOZILLA-1314295.'
         }
         implementation('org.bitbucket.b_c:jose4j') {
             version {

Original file line number	Diff line number	Diff line change
`@@ -87,9 +87,9 @@ dependencies {`
`87`	`87`	`constraints {`
`88`	`88`	`implementation('org.mozilla:rhino') {`
`89`	`89`	`version {`
`90`		`- require '1.7.12'`
	`90`	`+ require '1.7.15.1'`
`91`	`91`	`}`
`92`		`- because 'Fixes SNYK-JAVA-ORGMOZILLA-1314295.'`
	`92`	`+ because 'Fixes CVE-2025-66453, SNYK-JAVA-ORGMOZILLA-1314295.'`
`93`	`93`	`}`
`94`	`94`	`implementation('org.bitbucket.b_c:jose4j') {`
`95`	`95`	`version {`