Override vulnerable profiler sub-dependency

clarin-eric · Jun 19, 2024 · da1fe9a · da1fe9a
1 parent 493edc1
commit da1fe9a
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/backend/pom.xml b/backend/pom.xml
@@ -59,6 +59,12 @@
             <artifactId>profiler</artifactId>
             <version>1.0.14</version>
         </dependency>
+        <!-- override vulnerable profiler sub-dependency -->
+        <dependency>
+            <groupId>org.bouncycastle</groupId>
+            <artifactId>bcprov-jdk18on</artifactId>
+            <version>1.78.1</version>
+        </dependency>
 
         <dependency>
             <groupId>org.apache.commons</groupId>