Mitigate CVE-2022-3171 (frankframework#4003)

jjansenvr · Nov 16, 2022 · a853196 · a853196
1 parent e0222e8
commit a853196
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/aspose/pom.xml b/aspose/pom.xml
@@ -25,6 +25,13 @@
 			<artifactId>lombok</artifactId>
 		</dependency>
 
+		<!-- Explicit dependency to mitigate CVE-2022-3171 -->
+		<dependency>
+			<groupId>com.google.protobuf</groupId>
+			<artifactId>protobuf-java</artifactId>
+			<version>3.21.9</version>
+		</dependency>
+
 		<!-- Tika library -->
 		<dependency>
 			<groupId>org.apache.tika</groupId>