From c3b65f580754bd7d7b7e780cffc84d635bf1c649 Mon Sep 17 00:00:00 2001
From: Sriharsha Chintalapani <harshach@users.noreply.github.com>
Date: Thu, 19 Oct 2023 19:33:33 -0700
Subject: [PATCH] Fix vulnerabilities in server dependencies (#13659)

---
 openmetadata-service/pom.xml                       | 2 +-
 openmetadata-shaded-deps/elasticsearch-dep/pom.xml | 6 ++++++
 openmetadata-shaded-deps/opensearch-dep/pom.xml    | 6 ++++++
 pom.xml                                            | 2 +-
 4 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/openmetadata-service/pom.xml b/openmetadata-service/pom.xml
index ac98c55ca43a..db388326bf79 100644
--- a/openmetadata-service/pom.xml
+++ b/openmetadata-service/pom.xml
@@ -324,7 +324,7 @@
     <dependency>
       <groupId>org.json</groupId>
       <artifactId>json</artifactId>
-      <version>20230618</version>
+      <version>20231013</version>
     </dependency>
 
     <dependency>
diff --git a/openmetadata-shaded-deps/elasticsearch-dep/pom.xml b/openmetadata-shaded-deps/elasticsearch-dep/pom.xml
index 191a47da3dfd..e42b4616d8ea 100644
--- a/openmetadata-shaded-deps/elasticsearch-dep/pom.xml
+++ b/openmetadata-shaded-deps/elasticsearch-dep/pom.xml
@@ -20,6 +20,12 @@
             <groupId>org.elasticsearch.client</groupId>
             <artifactId>elasticsearch-rest-high-level-client</artifactId>
             <optional>true</optional>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.yaml</groupId>
+                    <artifactId>snakeyaml</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
     </dependencies>
     <profiles>
diff --git a/openmetadata-shaded-deps/opensearch-dep/pom.xml b/openmetadata-shaded-deps/opensearch-dep/pom.xml
index ee5c840ce448..3281523a7146 100644
--- a/openmetadata-shaded-deps/opensearch-dep/pom.xml
+++ b/openmetadata-shaded-deps/opensearch-dep/pom.xml
@@ -20,6 +20,12 @@
             <groupId>org.opensearch.client</groupId>
             <artifactId>opensearch-rest-high-level-client</artifactId>
             <optional>true</optional>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.yaml</groupId>
+                    <artifactId>snakeyaml</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
     </dependencies>
     <profiles>
diff --git a/pom.xml b/pom.xml
index 389d7d025cf0..ca9d299745d6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -479,7 +479,7 @@
         <groupId>org.eclipse.jetty</groupId>
         <artifactId>jetty-io</artifactId>
         <!-- 9.x required for Dropwizard 2.1.x -->
-        <version>9.4.51.v20230217</version>
+        <version>9.4.52.v20230823</version>
       </dependency>
 
       <!-- avoid security issue https://security.snyk.io/vuln/SNYK-JAVA-ORGGLASSFISH-1297098 -->