Merge pull request #279 from groovy/cve-2023-42503

Fix CVE-2023-42503
groovy · Sep 28, 2023 · fef1c6d · fef1c6d
2 parents 4f04c7d + dc54800
commit fef1c6d
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -71,6 +71,12 @@
       <artifactId>plexus-archiver</artifactId>
       <version>4.8.0</version>
     </dependency>
+    <dependency>
+      <!-- fix CVE-2023-42503 from org.codehaus.plexus:plexus-archiver -->
+      <groupId>org.apache.commons</groupId>
+      <artifactId>commons-compress</artifactId>
+      <version>1.24.0</version>
+    </dependency>
     <dependency>
       <groupId>org.apache.maven.shared</groupId>
       <artifactId>file-management</artifactId>