[PRODSEC-9150] fix for snappy vulnerability

Alfresco · Jun 17, 2024 · f7e940c · f7e940c
1 parent 459e3f1
commit f7e940c
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/plugins/alfresco-maven-plugin/pom.xml b/plugins/alfresco-maven-plugin/pom.xml
@@ -93,6 +93,17 @@
             <groupId>org.codehaus.plexus</groupId>
             <artifactId>plexus-archiver</artifactId>
             <version>4.9.2</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.iq80.snappy</groupId>
+                    <artifactId>snappy</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>org.iq80.snappy</groupId>
+            <artifactId>snappy</artifactId>
+            <version>0.5</version>
         </dependency>
         <dependency>
             <groupId>org.apache.maven</groupId>