Fix vulnerabilities detected in Snyk

RADAR-base · Dec 5, 2024 · 8b44a3b · 8b44a3b
1 parent 624f2ef
commit 8b44a3b
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/kafka-connect-jdbc/pom.xml b/kafka-connect-jdbc/pom.xml
@@ -86,11 +86,24 @@
     </pluginRepositories>
 
     <dependencies>
+
+        <!-- Fix vulnerability in transitive dependencies-->
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-databind</artifactId>
+            <version>2.10.5.1</version>
+        </dependency>
+        <dependency>
+            <groupId>org.xerial.snappy</groupId>
+            <artifactId>snappy-java</artifactId>
+            <version>1.1.10.1</version>
+        </dependency>
         <dependency>
             <groupId>org.apache.kafka</groupId>
             <artifactId>connect-api</artifactId>
             <scope>provided</scope>
         </dependency>
+
         <dependency>
             <groupId>org.apache.kafka</groupId>
             <artifactId>connect-runtime</artifactId>