fix: veracode issues: Spring boot and other lib version update

cpomorska · Jul 13, 2023 · f30c4d8 · f30c4d8
1 parent 8e57ed1
commit f30c4d8
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/build.gradle b/build.gradle
@@ -49,7 +49,11 @@ dependencies {
 	implementation group: 'com.smartsensesolutions', name: 'commons-dao', version: '0.0.5'
 	implementation 'org.liquibase:liquibase-core'
 	implementation 'org.eclipse.tractusx.ssi:cx-ssi-lib:0.0.13'
-	testImplementation 'org.projectlombok:lombok:1.18.26'
+
+	//Added explicitly to mitigate CVE 2022-1471
+	implementation group: 'org.yaml', name: 'snakeyaml', version: '2.0'
+
+	testImplementation 'org.projectlombok:lombok:1.18.28'
 	runtimeOnly 'org.postgresql:postgresql'
 	compileOnly 'org.projectlombok:lombok'
 	developmentOnly 'org.springframework.boot:spring-boot-devtools'