From d6658036eec9bef78e454925e9cfe0c3edbac335 Mon Sep 17 00:00:00 2001
From: Adrian Cole <adrian@tetrate.io>
Date: Fri, 8 Mar 2024 15:40:25 +0800
Subject: [PATCH] Resolve indirect dep CVE from adal4j

Signed-off-by: Adrian Cole <adrian@tetrate.io>
---
 pom.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/pom.xml b/pom.xml
index edbc4e61e0..5e9c744359 100644
--- a/pom.xml
+++ b/pom.xml
@@ -146,6 +146,13 @@
         <version>1.6.7</version>
         <optional>true</optional>
       </dependency>
+      <!-- override the version in adal4j which has a CVE -->
+      <dependency>
+        <groupId>net.minidev</groupId>
+        <artifactId>json-smart</artifactId>
+        <version>2.5.0</version>
+        <optional>true</optional>
+      </dependency>
       <dependency>
         <groupId>com.amazonaws</groupId>
         <artifactId>aws-java-sdk-sts</artifactId>