[incubator-kie-issues#1570] Fix CVE-2022-45688 CVE-2023-5072 (#2133)

Co-authored-by: Gabriele-Cardosi <gabriele.cardosi@ibm.com>
apache · Oct 29, 2024 · 924e9f7 · 924e9f7
1 parent 9565e84
commit 924e9f7
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 0 deletions.
diff --git a/kogito-apps-build-parent/pom.xml b/kogito-apps-build-parent/pom.xml
@@ -66,6 +66,7 @@
         <version.org.apache.opennlp>2.3.2</version.org.apache.opennlp>
         <version.org.apache.commons.csv>1.10.0</version.org.apache.commons.csv>
         <version.org.jredisearch>2.2.0</version.org.jredisearch>
+        <version.org.json>20231013</version.org.json>
         <version.org.mapstruct>1.5.5.Final</version.org.mapstruct>
         <version.org.skyscreamer>1.5.1</version.org.skyscreamer>
         <version.com.graphql-java-extended-scalars>22.0</version.com.graphql-java-extended-scalars>
@@ -158,6 +159,17 @@
                 <groupId>com.redislabs</groupId>
                 <artifactId>jredisearch</artifactId>
                 <version>${version.org.jredisearch}</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>org.json</groupId>
+                        <artifactId>json</artifactId>
+                    </exclusion>
+                </exclusions>
+            </dependency>
+            <dependency>
+                <groupId>org.json</groupId>
+                <artifactId>json</artifactId>
+                <version>${version.org.json}</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.commons</groupId>

diff --git a/persistence-commons/persistence-commons-redis/pom.xml b/persistence-commons/persistence-commons-redis/pom.xml
@@ -44,6 +44,16 @@
     <dependency>
       <groupId>com.redislabs</groupId>
       <artifactId>jredisearch</artifactId>
+      <exclusions>
+        <exclusion>
+          <groupId>org.json</groupId>
+          <artifactId>json</artifactId>
+        </exclusion>
+      </exclusions>
+    </dependency>
+    <dependency>
+      <groupId>org.json</groupId>
+      <artifactId>json</artifactId>
     </dependency>
     <dependency>
       <groupId>io.quarkus</groupId>