fix: bump protobuff due to CVE 2021 22569 (#102)

* fix: bump protobuff due to CVE 2021 22569 * chore: add a comment
jenkinsci · Jul 27, 2022 · c7db5f9 · c7db5f9
1 parent 7acd252
commit c7db5f9
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -107,6 +107,12 @@
             <artifactId>tink</artifactId>
             <version>1.6.1</version>
         </dependency>
+        <!-- TODO check if we can exclude protobuf -->
+        <dependency>
+            <groupId>com.google.protobuf</groupId>
+            <artifactId>protobuf-java</artifactId>
+            <version>3.21.2</version>
+        </dependency>
         <dependency>
             <groupId>org.testcontainers</groupId>
             <artifactId>testcontainers</artifactId>