Revert httpclient to 5.3.1 (#155)

oracle · Oct 8, 2024 · d331de4 · d331de4
1 parent 7b7692a
commit d331de4
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/pom.xml b/pom.xml
@@ -35,7 +35,7 @@
         <version.lib.bedrock>7.0.5</version.lib.bedrock>
         <version.lib.coherence>24.09</version.lib.coherence>
         <version.lib.coherence-spring>4.2.0</version.lib.coherence-spring>
-        <version.lib.httpclient>5.4</version.lib.httpclient>
+        <version.lib.httpclient>5.3.1</version.lib.httpclient>
         <version.lib.lombok>1.18.28</version.lib.lombok>
         <version.lib.rest-assured>5.5.0</version.lib.rest-assured>
         <version.lib.spring-boot>3.3.4</version.lib.spring-boot>

diff --git a/src/main/config/dependency-check-suppression.xml b/src/main/config/dependency-check-suppression.xml
@@ -7,4 +7,11 @@
 -->
 
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
+  <suppress>
+    <notes><![CDATA[
+    file name: commons-io-2.11.0.jar
+    ]]></notes>
+    <packageUrl regex="true">^pkg:maven/commons-io/commons-io@.*$</packageUrl>
+    <vulnerabilityName>CVE-2024-47554</vulnerabilityName>
+  </suppress>
 </suppressions>