Merge pull request #140 from oracle/fix_CVEs

bump and exclude dependencies to fix CVEs
oracle · Jul 29, 2024 · ec71423 · ec71423
2 parents f04a0f8 + 3dbb1c7
commit ec71423
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/pgql-lang/pom.xml b/pgql-lang/pom.xml
@@ -55,6 +55,11 @@
       <artifactId>slf4j-api</artifactId>
       <version>2.0.9</version>
     </dependency>
+    <dependency>
+      <groupId>org.apache.commons</groupId>
+      <artifactId>commons-configuration2</artifactId>
+      <version>2.11.0</version>
+    </dependency>
     <dependency>
       <groupId>commons-io</groupId>
       <artifactId>commons-io</artifactId>
@@ -64,6 +69,12 @@
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-vfs2</artifactId>
       <version>2.9.0</version>
+      <exclusions>
+        <exclusion>
+          <groupId>org.apache.hadoop</groupId>
+          <artifactId>hadoop-hdfs-client</artifactId>
+        </exclusion>
+      </exclusions>
     </dependency>
     <dependency>
       <groupId>com.google.guava</groupId>