fix CVE-2025-12183

2025-12-04 12:22:53 +03:00 · 2025-12-04 12:22:53 +03:00 · 61c42bb84b
commit 61c42bb84b
parent 1acfb724fa
2 changed files with 14 additions and 0 deletions
--- a/backend/pom.xml
+++ b/backend/pom.xml
@ -175,6 +175,10 @@
      <groupId>org.apache.kafka</groupId>
      <artifactId>kafka-clients</artifactId>
    </dependency>
+    <dependency>
+      <groupId>org.lz4</groupId>
+      <artifactId>lz4-java</artifactId>
+    </dependency>
  </dependencies>
  <build>
    <finalName>${project.parent.artifactId}</finalName>
--- a/pom.xml
+++ b/pom.xml
@ -306,8 +306,18 @@
            <groupId>org.xerial.snappy</groupId>
            <artifactId>snappy-java</artifactId>
          </exclusion>
+          <exclusion>
+            <groupId>org.lz4</groupId>
+            <artifactId>lz4-java</artifactId>
+          </exclusion>
        </exclusions>
      </dependency>
+      <dependency>
+        <groupId>org.lz4</groupId>
+        <artifactId>lz4-java</artifactId>
+        <version>1.8.1</version>
+        <scope>runtime</scope>
+      </dependency>
    </dependencies>
  </dependencyManagement>
  <repositories>