From bded2143c60874245345e47f73113c47b67d0876 Mon Sep 17 00:00:00 2001
From: "adel.ka" <a.kalimullin@micord.ru>
Date: Thu, 4 Dec 2025 12:08:13 +0300
Subject: [PATCH] SUPPORT-9634: fix CVE-2025-12183

---
 backend/pom.xml |  4 ++++
 pom.xml         | 10 ++++++++++
 2 files changed, 14 insertions(+)

diff --git a/backend/pom.xml b/backend/pom.xml
index b7650dd9..1cb2ab63 100644
--- a/backend/pom.xml
+++ b/backend/pom.xml
@@ -248,6 +248,10 @@
       <groupId>org.apache.kafka</groupId>
       <artifactId>kafka-clients</artifactId>
     </dependency>
+    <dependency>
+      <groupId>org.lz4</groupId>
+      <artifactId>lz4-java</artifactId>
+    </dependency>
   </dependencies>
   <build>
     <finalName>${project.parent.artifactId}</finalName>
diff --git a/pom.xml b/pom.xml
index 351b9d96..22b9d3f2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -344,8 +344,18 @@
             <groupId>org.xerial.snappy</groupId>
             <artifactId>snappy-java</artifactId>
           </exclusion>
+          <exclusion>
+            <groupId>org.lz4</groupId>
+            <artifactId>lz4-java</artifactId>
+          </exclusion>
         </exclusions>
       </dependency>
+      <dependency>
+        <groupId>org.lz4</groupId>
+        <artifactId>lz4-java</artifactId>
+        <version>1.8.1</version>
+        <scope>runtime</scope>
+      </dependency>
     </dependencies>
   </dependencyManagement>
   <repositories>