Skip to content

Commit 2435ff2

Browse files
authored
fix(security): add snappy exclusion to checkstyle dependency (#345)
1 parent e6a6ba2 commit 2435ff2

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

pom.xml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -201,10 +201,17 @@
201201
<artifactId>protobuf-java</artifactId>
202202
<version>3.25.5</version>
203203
</dependency>
204+
<!-- Security: Exclude vulnerable org.iq80.snappy from transitive dependencies -->
204205
<dependency>
205206
<groupId>org.apache.maven.plugins</groupId>
206207
<artifactId>maven-checkstyle-plugin</artifactId>
207208
<version>3.6.0</version>
209+
<exclusions>
210+
<exclusion>
211+
<groupId>org.iq80.snappy</groupId>
212+
<artifactId>snappy</artifactId>
213+
</exclusion>
214+
</exclusions>
208215
</dependency>
209216
<dependency>
210217
<groupId>org.apache.logging.log4j</groupId>

0 commit comments

Comments
 (0)