arsvendg/Stirling-PDF
1
0
Fork 0
mirror of https://github.com/arsvendg/Stirling-PDF.git synced 2026-07-16 19:33:11 +02:00
Code Issues Actions 4 Packages Projects Releases 1 Wiki Activity

deps (#5796)

Browse Source
This commit is contained in:
Anthony Stirling
2026-02-25 15:42:36 +00:00
committed by GitHub
parent 2bacb4dc81
commit c9e7d9d6c9
2 changed files with 19 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
build.gradle
+15
View File
@@ -188,6 +188,21 @@ subprojects {
// google-java-format 1.34+ requires Guava 33.x (ImmutableSortedMapFauxverideShim);
// force it here so Spotless's FeatureClassLoader resolves the correct version.
resolutionStrategy.force 'com.google.guava:guava:33.4.8-jre'
// Security CVE fixes - hardcoded resolution strategy to ensure safe versions
// Primary fixes via explicit dependencies in app/core/build.gradle:
// - CVE-2022-25647: gson 2.8.9+ (explicit dependency overrides tabula 2.8.7)
// - CVE-2025-66453: rhino 1.7.15 (explicit dependency overrides verapdf 1.7.13)
// Fallback strategy force declarations for additional safety:
resolutionStrategy.force 'com.google.code.gson:gson:2.8.9'
resolutionStrategy.force 'org.mozilla:rhino:1.7.15'
// CVE-2025-48924: commons-lang3 3.20.0 DoS prevention
resolutionStrategy.force 'org.apache.commons:commons-lang3:3.20.0'
// CVE-2024-47554: commons-io 2.21.0 DoS prevention
resolutionStrategy.force 'commons-io:commons-io:2.21.0'
// Bouncycastle 1.83 (from bouncycastleVersion variable)
resolutionStrategy.force 'org.bouncycastle:bcprov-jdk18on:1.83'
resolutionStrategy.force 'org.bouncycastle:bcpkix-jdk18on:1.83'
}
dependencyManagement {