Upgraded commons-compress version to fix Snyk.io CVE report

fbascheper · Nov 14, 2018 · 985cf33 · 985cf33
1 parent 13a81f9
commit 985cf33
Showing 1 changed file with 12 additions and 1 deletion.
diff --git a/pom.xml b/pom.xml
@@ -54,6 +54,7 @@
         <confluent.version>5.0.0</confluent.version>
         <kafka.version>2.0.0</kafka.version>
         <avro.version>1.8.2</avro.version>
+        <commons-compress.version>1.18</commons-compress.version>
         <slf4j.version>1.7.25</slf4j.version>
 
         <telegrambots.version>4.1</telegrambots.version>
@@ -98,9 +99,19 @@
             <groupId>org.apache.avro</groupId>
             <artifactId>avro</artifactId>
             <version>${avro.version}</version>
-            <scope>compile</scope>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.apache.commons</groupId>
+                    <artifactId>commons-compress</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
 
+        <dependency>
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-compress</artifactId>
+            <version>${commons-compress.version}</version>
+        </dependency>
         <dependency>
             <groupId>org.slf4j</groupId>
             <artifactId>slf4j-api</artifactId>