mirror of
https://github.com/apache/struts.git
synced 2026-08-06 15:17:00 +00:00
Excludes vulnerable version of mxparser and uses fixed one
This commit is contained in:
@@ -1122,8 +1122,19 @@
|
||||
<groupId>com.thoughtworks.xstream</groupId>
|
||||
<artifactId>xstream</artifactId>
|
||||
<version>1.4.16</version>
|
||||
<exclusions>
|
||||
<exclusion>
|
||||
<groupId>io.github.x-stream</groupId>
|
||||
<artifactId>mxparser</artifactId>
|
||||
</exclusion>
|
||||
</exclusions>
|
||||
</dependency>
|
||||
|
||||
<dependency>
|
||||
<groupId>io.github.x-stream</groupId>
|
||||
<artifactId>mxparser</artifactId>
|
||||
<version>1.2.1</version>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>javax.persistence</groupId>
|
||||
<artifactId>persistence-api</artifactId>
|
||||
|
||||
Reference in New Issue
Block a user