Skip to content

Commit d72cdf7

Browse files
authored
YARN-11611. Remove json-io to 4.14.1 due to CVE-2023-34610 (#6257)
Co-authored-by: Benjamin Teke <[email protected]>
1 parent 8a610e6 commit d72cdf7

File tree

1 file changed

+4
-0
lines changed
  • hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice

1 file changed

+4
-0
lines changed

hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice/pom.xml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -229,6 +229,10 @@
229229
<groupId>org.javassist</groupId>
230230
<artifactId>javassist</artifactId>
231231
</exclusion>
232+
<exclusion>
233+
<groupId>com.cedarsoftware</groupId>
234+
<artifactId>java-util</artifactId>
235+
</exclusion>
232236
</exclusions>
233237
</dependency>
234238
</dependencies>

0 commit comments

Comments
 (0)