From f08749243e7362656bba5b89d19b8857e3fd7cd1 Mon Sep 17 00:00:00 2001 From: Komazaki Kei Date: Fri, 21 Jun 2024 16:04:14 +0900 Subject: [PATCH] bump up commons-compress to 1.26.2 - 1.25.* contains vulerabities CVE-2024-25710 and CVE-2024-26308 - https://nvd.nist.gov/vuln/detail/CVE-2024-25710 - https://nvd.nist.gov/vuln/detail/CVE-2024-26308 --- project.clj | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project.clj b/project.clj index 9a2aa018..b51719c 100644 --- a/project.clj +++ b/project.clj @@ -12,7 +12,7 @@ [commons-net "3.10.0"] [digest "1.4.10"] [lambdaisland/uri "1.19.155"] - [org.apache.commons/commons-compress "1.25.0"] + [org.apache.commons/commons-compress "1.26.2"] [progrock "0.1.2"]] :test-selectors {:default (complement :integration) :integration :integration}