Skip to content

Commit 40b36e8

Browse files
Copilotgygrobot
andauthored
fix: bump tomcat-embed-core to 11.0.22 to fix GHSA-9m89-8frq-c98c (CHK-13457)
Agent-Logs-Url: https://github.com/getyourguide/openapi-validation-java/sessions/bd3aadad-f626-4f9a-801c-9f32973e0659 Co-authored-by: gygrobot <19344429+gygrobot@users.noreply.github.com>
1 parent 875e8c5 commit 40b36e8

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

build.gradle

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -31,9 +31,9 @@ subprojects {
3131
because('GHSA-2m67-wjpj-xhg9: Jackson Core 3.0.0-3.1.0 maxDocumentLength bypass')
3232
}
3333
if (requested.group == 'org.apache.tomcat.embed' && requested.name == 'tomcat-embed-core'
34-
&& requested.version != null && requested.version < '11.0.21') {
35-
useVersion('11.0.21')
36-
because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6: Apache Tomcat < 11.0.21 vulnerabilities')
34+
&& requested.version != null && requested.version < '11.0.22') {
35+
useVersion('11.0.22')
36+
because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6 / GHSA-9m89-8frq-c98c: Apache Tomcat vulnerabilities (< 11.0.22)')
3737
}
3838
}
3939
}

0 commit comments

Comments
 (0)