Bump json version to address CVE-2023-5072 (#1551)

Signed-off-by: Bhavana Ramaram <[email protected]>
opensearch-project · Oct 25, 2023 · 8c3e453 · 8c3e453
1 parent 5d9324c
commit 8c3e453
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/common/build.gradle b/common/build.gradle
@@ -20,7 +20,7 @@ dependencies {
 
     compileOnly group: 'org.apache.commons', name: 'commons-text', version: '1.10.0'
     compileOnly group: 'com.google.code.gson', name: 'gson', version: '2.10.1'
-    compileOnly group: 'org.json', name: 'json', version: '20230227'
+    compileOnly group: 'org.json', name: 'json', version: '20231013'
 }
 
 lombok {

diff --git a/ml-algorithms/build.gradle b/ml-algorithms/build.gradle
@@ -62,7 +62,7 @@ dependencies {
     implementation 'software.amazon.awssdk:apache-client'
     implementation 'com.amazonaws:aws-encryption-sdk-java:2.4.1'
     implementation 'com.jayway.jsonpath:json-path:2.8.0'
-    implementation group: 'org.json', name: 'json', version: '20230227'
+    implementation group: 'org.json', name: 'json', version: '20231013'
 }
 
 lombok {

diff --git a/search-processors/build.gradle b/search-processors/build.gradle
@@ -39,7 +39,7 @@ dependencies {
     // https://mvnrepository.com/artifact/org.apache.httpcomponents.core5/httpcore5
     implementation group: 'org.apache.httpcomponents.core5', name: 'httpcore5', version: '5.2.2'
     implementation("com.google.guava:guava:32.0.1-jre")
-    implementation group: 'org.json', name: 'json', version: '20230227'
+    implementation group: 'org.json', name: 'json', version: '20231013'
     implementation group: 'org.apache.commons', name: 'commons-text', version: '1.10.0'
     testImplementation "org.opensearch.test:framework:${opensearch_version}"
 }