Update to commons-collections 3.2.2 to mitigate a CVE

box · Jul 18, 2023 · 73fcee0 · 73fcee0
1 parent f0a8ef7
commit 73fcee0
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/webapp/pom.xml b/webapp/pom.xml
@@ -158,9 +158,19 @@
                     <groupId>bouncycastle</groupId>
                     <artifactId>bcprov-jdk15</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>commons-collections</groupId>
+                    <artifactId>commons-collections</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
 
+        <dependency>
+            <groupId>commons-collections</groupId>
+            <artifactId>commons-collections</artifactId>
+            <version>3.2.2</version>
+        </dependency>
+
         <dependency>
             <groupId>com.amazonaws</groupId>
             <artifactId>aws-java-sdk</artifactId>