Exluded Vulnerability of gson

Alfresco · May 2, 2024 · a690f93 · a690f93
1 parent e8e39ce
commit a690f93
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 2 deletions.
diff --git a/surf/pom.xml b/surf/pom.xml
@@ -57,7 +57,7 @@
       <!-- Surf projects historically use 'spring.version' property -->
       <spring.version>5.3.33</spring.version>
       <dependency.alfresco-core.version>8.425</dependency.alfresco-core.version>
-      <dependency.webscripts.version>8.49</dependency.webscripts.version>
+      <dependency.webscripts.version>8.50</dependency.webscripts.version>
       <dependency.freemarker.version>2.3.30</dependency.freemarker.version>
       <dependency.rhino.version>1.7.13</dependency.rhino.version>
       <dependency.yui.version>2.9.0-alfresco-20141223</dependency.yui.version>

diff --git a/surf/spring-surf/spring-surf/pom.xml b/surf/spring-surf/spring-surf/pom.xml
@@ -66,8 +66,18 @@
                   <groupId>com.google.protobuf</groupId>
                   <artifactId>protobuf-java</artifactId>
                </exclusion>
+               <exclusion>
+                  <groupId>com.google.code.gson</groupId>
+                  <artifactId>gson</artifactId>
+               </exclusion>
             </exclusions>
-         </dependency>
+      </dependency>
+      <dependency>
+         <groupId>com.google.code.gson</groupId>
+         <artifactId>gson</artifactId>
+         <version>2.8.9</version>
+      </dependency>
+
       <dependency>
          <groupId>com.google.protobuf</groupId>
          <artifactId>protobuf-java</artifactId>