Merge branch 'master' into release/3.0.0

e-gineering · Dec 22, 2019 · d48833c · d48833c
2 parents 8f54d3d + c86b708
commit d48833c
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -68,6 +68,13 @@
     </distributionManagement>
 
     <dependencies>
+        <!-- Transitive dependencies include 3.0.10, which contains an injection CVE. -->
+        <dependency>
+            <groupId>org.codehaus.plexus</groupId>
+            <artifactId>plexus-utils</artifactId>
+            <version>3.0.24</version>
+        </dependency>
+
         <dependency>
             <groupId>org.apache.maven</groupId>
             <artifactId>maven-core</artifactId>