hotfix: SET-527 vulnerability fixes

partior-3p · Jun 25, 2024 · 7e3fa13 · 7e3fa13
1 parent e161ac5
commit 7e3fa13
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/key-vault/hashicorp-key-vault/build.gradle b/key-vault/hashicorp-key-vault/build.gradle
@@ -16,6 +16,9 @@ configurations.all {
   exclude group: "org.springframework", module: "spring-jcl"
   exclude group: "org.springframework", module: "spring-aop"
   exclude group: "jakarta.json"
+  resolutionStrategy {
+    force 'com.squareup.okio:okio:1.17.6'
+  }
 }
 
 def springVersion = "6.1.6"
@@ -26,7 +29,7 @@ dependencies {
   implementation("org.springframework.vault:spring-vault-core:3.1.1") {
     exclude group: "org.springframework",module: "spring-core"
   }
-  implementation "com.squareup.okhttp3:okhttp:4.12.0"
+  implementation "com.squareup.okhttp3:okhttp:3.14.9"
 
   implementation "org.springframework:spring-orm:$springVersion"
   testImplementation "org.springframework:spring-test:$springVersion"

diff --git a/security/build.gradle b/security/build.gradle
@@ -2,6 +2,12 @@ plugins {
   id "java-library"
 }
 
+configurations.all {
+  resolutionStrategy {
+    force 'org.bouncycastle:bcprov-jdk18on:1.78'
+  }
+}
+
 dependencies {
   implementation project(":config")
   implementation project(":shared")