From 61c42bb84b94a23ed24fa9f2b5b8f41c4384e2a4 Mon Sep 17 00:00:00 2001
From: "adel.ka" <a.kalimullin@micord.ru>
Date: Thu, 4 Dec 2025 12:22:53 +0300
Subject: [PATCH] fix CVE-2025-12183

---
 backend/pom.xml |  4 ++++
 pom.xml         | 10 ++++++++++
 2 files changed, 14 insertions(+)

diff --git a/backend/pom.xml b/backend/pom.xml
index 3eaf985..9cf7cc6 100644
--- a/backend/pom.xml
+++ b/backend/pom.xml
@@ -175,6 +175,10 @@
       <groupId>org.apache.kafka</groupId>
       <artifactId>kafka-clients</artifactId>
     </dependency>
+    <dependency>
+      <groupId>org.lz4</groupId>
+      <artifactId>lz4-java</artifactId>
+    </dependency>
   </dependencies>
   <build>
     <finalName>${project.parent.artifactId}</finalName>
diff --git a/pom.xml b/pom.xml
index c2f8bf5..989df5f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -306,8 +306,18 @@
             <groupId>org.xerial.snappy</groupId>
             <artifactId>snappy-java</artifactId>
           </exclusion>
+          <exclusion>
+            <groupId>org.lz4</groupId>
+            <artifactId>lz4-java</artifactId>
+          </exclusion>
         </exclusions>
       </dependency>
+      <dependency>
+        <groupId>org.lz4</groupId>
+        <artifactId>lz4-java</artifactId>
+        <version>1.8.1</version>
+        <scope>runtime</scope>
+      </dependency>
     </dependencies>
   </dependencyManagement>
   <repositories>