GH-16472 - fix CVE-2024-52046 with mina-core upgrade

h2oai · Jan 8, 2025 · ace7eac · ace7eac
1 parent 6f19a16
commit ace7eac
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/h2o-jetty-9/build.gradle b/h2o-jetty-9/build.gradle
@@ -18,4 +18,10 @@ dependencies {
 
     testImplementation group: "junit", name: "junit", version: "4.12"
     testImplementation "org.mockito:mockito-core:2.23.0"
+
+    constraints{
+        api("org.apache.mina:mina-core:2.2.3") {
+            because 'Fixes CVE-2024-52046'
+        }
+    }
 }