[Backport 2.x] Fixes CVE-2022-42920 by forcing bcel version to resovl…

…e to 6.6 Signed-off-by: Craig Perkins <cwperx@amazon.com>
opensearch-project · Dec 6, 2022 · 2af6be9 · 2af6be9
1 parent b908b89
commit 2af6be9
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -246,6 +246,7 @@ configurations.all {
         force "io.netty:netty-handler:${versions.netty}"
         force "io.netty:netty-transport:${versions.netty}"
         force "io.netty:netty-transport-native-unix-common:${versions.netty}"
+        force "org.apache.bcel:bcel:6.6.0" // This line should be removed once Spotbugs is upgraded to 4.7.4
     }
 }