Fixes -CVE-2024-47554

Signed-off-by: Gagan Juneja <[email protected]>
opensearch-project · Dec 11, 2024 · 604c734 · 604c734
1 parent dbb6b50
commit 604c734
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/build.gradle b/build.gradle
@@ -334,7 +334,7 @@ dependencies {
     compile group: 'org.apache.logging.log4j', name: 'log4j-api', version: "${log4jVersion}"
     compile group: 'org.apache.logging.log4j', name: 'log4j-core', version: "${log4jVersion}"
     compile group: 'org.apache.commons', name: 'commons-lang3', version: '3.12'
-    compile group: 'commons-io', name: 'commons-io', version: '2.7'
+    compile group: 'commons-io', name: 'commons-io', version: '2.17.0'
     compile group: 'com.google.errorprone', name: 'error_prone_annotations', version: '2.9.0'
     compile group: 'com.google.protobuf', name: 'protobuf-java', version: '3.21.8'
     implementation 'io.grpc:grpc-netty:1.56.1'