Fix CVE-2023-37460

groovy · Aug 2, 2023 · 242baa8 · 242baa8
1 parent b3ffc40
commit 242baa8
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -65,6 +65,13 @@
       <artifactId>maven-archiver</artifactId>
       <version>3.6.0</version>
     </dependency>
+    <dependency>
+      <!-- fix CVE-2023-37460 from org.apache.maven:maven-archiver -->
+      <groupId>org.codehaus.plexus</groupId>
+      <artifactId>plexus-archiver</artifactId>
+      <version>4.8.0</version>
+      <scope>runtime</scope>
+    </dependency>
     <dependency>
       <groupId>org.apache.maven.shared</groupId>
       <artifactId>file-management</artifactId>