From a15e43b74951ee478c5a0722bd946dc4d92119c6 Mon Sep 17 00:00:00 2001 From: Shrikant Temburwar Date: Thu, 24 Oct 2024 10:30:48 +0530 Subject: [PATCH] Upgrade commons-io to 2.14.0 to address CVE-2024-47554 Upgraded commons-io from 2.8.0 to 2.14.0 to fix a potential denial of service vulnerability (CVE-2024-47554) in XmlStreamReader. Signed-off-by: Shrikant Temburwar --- clientSdkTests/pom.xml | 2 +- pom.xml | 2 +- priTests/pom.xml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/clientSdkTests/pom.xml b/clientSdkTests/pom.xml index 72efbf4..170b023 100644 --- a/clientSdkTests/pom.xml +++ b/clientSdkTests/pom.xml @@ -45,7 +45,7 @@ commons-io commons-io - 2.8.0 + 2.14.0 diff --git a/pom.xml b/pom.xml index ebb59da..4b1fb64 100644 --- a/pom.xml +++ b/pom.xml @@ -74,7 +74,7 @@ commons-io commons-io - 2.8.0 + 2.14.0 diff --git a/priTests/pom.xml b/priTests/pom.xml index e372894..b3334c8 100644 --- a/priTests/pom.xml +++ b/priTests/pom.xml @@ -45,7 +45,7 @@ commons-io commons-io - 2.8.0 + 2.14.0