chore: constrain okio (#68)

aaron-steinfeld · avinashkolluru · web-flow · commit 4c174dc746e3 · 2023-08-01T16:36:42.000+05:30
* chore: constrain okio

* Update kafka-bom/build.gradle.kts

---------

Co-authored-by: Avinash &lt;52672355+avinashkolluru@users.noreply.github.com&gt;
diff --git a/kafka-bom/build.gradle.kts b/kafka-bom/build.gradle.kts
@@ -17,6 +17,9 @@ dependencies {
     api("com.google.protobuf:protobuf-java-util:3.21.7") {
       because("https://nvd.nist.gov/vuln/detail/CVE-2022-3171")
     }
+    api("com.squareup.okio:okio:3.4.0") {
+      because("https://nvd.nist.gov/vuln/detail/CVE-2023-3635 in io.confluent:kafka-protobuf-serializer:7.4.0")
+    }
 
     api("io.confluent:kafka-streams-avro-serde:$kafkaVersion")
     api("io.confluent:kafka-protobuf-serializer:$kafkaVersion")

Original file line number	Diff line number	Diff line change
`@@ -17,6 +17,9 @@ dependencies {`
`17`	`17`	`api("com.google.protobuf:protobuf-java-util:3.21.7") {`
`18`	`18`	`because("https://nvd.nist.gov/vuln/detail/CVE-2022-3171")`
`19`	`19`	`}`
	`20`	`+ api("com.squareup.okio:okio:3.4.0") {`
	`21`	`+ because("https://nvd.nist.gov/vuln/detail/CVE-2023-3635 in io.confluent:kafka-protobuf-serializer:7.4.0")`
	`22`	`+ }`
`20`	`23`
`21`	`24`	`api("io.confluent:kafka-streams-avro-serde:$kafkaVersion")`
`22`	`25`	`api("io.confluent:kafka-protobuf-serializer:$kafkaVersion")`