Force commons-io transitive dependency version

Signed-off-by: Daniel Widdis <[email protected]>
dbwiddis · Dec 9, 2024 · c854bbd · c854bbd
1 parent 9e04292
commit c854bbd
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/plugins/repository-hdfs/build.gradle b/plugins/repository-hdfs/build.gradle
@@ -91,6 +91,13 @@ dependencies {
   if (isEclipse == false) {
     testRuntimeOnly files(project(':test:fixtures:krb5kdc-fixture').ext.krb5Keytabs("hdfs", "hdfs_hdfs.build.opensearch.org.keytab").parent)
   }
+
+  configurations.all {
+    resolutionStrategy {
+      force("commons-io:commmons-io:2.16.0") // CVE-2024-47554
+    }
+  }
+
 }
 
 restResources {