Skip to content

Commit

Permalink
Add common collection 3.2.2 for fix CVE in spring-security-saml2
Browse files Browse the repository at this point in the history
  • Loading branch information
raikbitters committed Aug 26, 2024
1 parent 8892f25 commit 655a43f
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -87,6 +87,7 @@ dependencies {
implementation 'org.springframework.security:spring-security-ldap'
// TODO: consider migration to spring-security-saml2-service-provider
implementation 'org.springframework.security.extensions:spring-security-saml2-core:2.0.0.M31'
implementation 'commons-collections:commons-collections:3.2.2'
//Temporary fix of https://nvd.nist.gov/vuln/detail/CVE-2019-12400
implementation 'org.apache.santuario:xmlsec:3.0.3'
//Fix CVE-2015-7501, CVE-2015-4852
Expand Down

0 comments on commit 655a43f

Please sign in to comment.