Require json-path 2.9.0 to fix CVE-2023-51074. Resolves opensearch-pr…

…oject#3919. (opensearch-project#4132) Signed-off-by: David Venable <[email protected]>
asifsmohammed · Feb 15, 2024 · 838744c · 838744c
1 parent 18cb6c9
commit 838744c
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -194,6 +194,12 @@ subprojects {
                 }
                 because 'CVE from transitive dependencies'
             }
+            implementation('com.jayway.jsonpath:json-path') {
+                version {
+                    require '2.9.0'
+                }
+                because 'Fixes CVE-2023-51074 from transitive dependencies'
+            }
             implementation('org.bitbucket.b_c:jose4j') {
                 version {
                     require '0.9.3'