Security fix httpclient (#53)

- Updates commons-codec transitive dependency Resolves #52 {patch}
nagyesta · Mar 4, 2022 · 1b519b6 · 1b519b6
1 parent b8fa521
commit 1b519b6
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 0 deletions.
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -7,6 +7,7 @@ hibernateValidator = "6.2.3.Final"
 findbugs = "3.0.2"
 lombok = "1.18.22"
 httpClient = "4.5.13"
+commonsCodec = "1.15"
 azureKeyVaultClient = "4.3.7"
 testcontainers = "1.16.3"
 cucumber = "7.2.3"
@@ -51,6 +52,7 @@ hibernate-validator = { module = "org.hibernate:hibernate-validator", version.re
 findbugs-jsr305 = { module = "com.google.code.findbugs:jsr305", version.ref = "findbugs" }
 
 httpclient = { module = "org.apache.httpcomponents:httpclient", version.ref = "httpClient" }
+commons-codec = { module = "commons-codec:commons-codec", version.ref = "commonsCodec" }
 
 mockito-core = { module = "org.mockito:mockito-core", version.ref = "mockitoCore" }
 

diff --git a/lowkey-vault-client/build.gradle b/lowkey-vault-client/build.gradle
@@ -17,6 +17,7 @@ dependencies {
         exclude(group: "io.netty")
     }
     implementation libs.httpclient
+    implementation libs.commons.codec
     testImplementation libs.mockito.core
     testImplementation libs.jupiter
     testImplementation libs.logback.classic

diff --git a/lowkey-vault-docker/build.gradle b/lowkey-vault-docker/build.gradle
@@ -22,6 +22,7 @@ group = "${rootProject.group}"
 dependencies {
     testImplementation project(":lowkey-vault-client")
     testImplementation libs.httpclient
+    testImplementation libs.commons.codec
     testImplementation libs.azure.security.keyvault.keys
     testImplementation libs.azure.security.keyvault.secrets
     testImplementation libs.spring.boot.starter.test

diff --git a/lowkey-vault-testcontainers/build.gradle b/lowkey-vault-testcontainers/build.gradle
@@ -16,6 +16,7 @@ dependencies {
     testImplementation project(":lowkey-vault-client")
     testImplementation libs.bundles.jackson
     testImplementation libs.httpclient
+    testImplementation libs.commons.codec
     testImplementation libs.azure.security.keyvault.keys
     testImplementation libs.azure.security.keyvault.secrets
     testImplementation libs.mockito.core