CVE-2024-47561: Exclude org.apache.avro:avro

cdapio · Oct 24, 2024 · a847c1a · a847c1a
1 parent 3871c4d
commit a847c1a
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/cdap-sentry/cdap-sentry-extension/cdap-sentry-binding/pom.xml b/cdap-sentry/cdap-sentry-extension/cdap-sentry-binding/pom.xml
@@ -58,6 +58,12 @@
     <dependency>
       <groupId>org.apache.hadoop</groupId>
       <artifactId>hadoop-common</artifactId>
+      <exclusions>
+        <exclusion>
+          <groupId>org.apache.avro</groupId>
+          <artifactId>avro</artifactId>
+        </exclusion>
+      </exclusions>
     </dependency>
     <dependency>
       <groupId>org.apache.zookeeper</groupId>