diff --git a/.nvd/suppression.xml b/.nvd/suppression.xml index 644414dd3..feb798bf5 100644 --- a/.nvd/suppression.xml +++ b/.nvd/suppression.xml @@ -18,4 +18,12 @@ cpe:/a:clojure:clojure CVE-2017-20189 + + + + ^pkg:maven/org\.eclipse\.jetty/jetty\-http@.*$ + CVE-2024-6763 + diff --git a/deps.edn b/deps.edn index c968e6f44..545acc8fa 100644 --- a/deps.edn +++ b/deps.edn @@ -27,10 +27,15 @@ com.zaxxer/HikariCP {:mvn/version "5.0.0" :exclusions [org.slf4j/slf4j-api]} ;; Pedestal and Jetty webserver deps - io.pedestal/pedestal.jetty {:mvn/version "0.6.3" - :exclusions [org.eclipse.jetty.http2/http2-server]} - org.eclipse.jetty.http2/http2-server {:mvn/version "9.4.54.v20240208"} - org.eclipse.jetty/jetty-alpn-java-server {:mvn/version "9.4.54.v20240208"} + io.pedestal/pedestal.jetty {:mvn/version "0.6.3"} + org.eclipse.jetty/jetty-server {:mvn/version "9.4.56.v20240826"} + org.eclipse.jetty/jetty-servlet {:mvn/version "9.4.56.v20240826"} + org.eclipse.jetty/jetty-alpn-server {:mvn/version "9.4.56.v20240826"} + org.eclipse.jetty.http2/http2-server {:mvn/version "9.4.56.v20240826"} + org.eclipse.jetty/jetty-alpn-java-server {:mvn/version "9.4.56.v20240826"} + org.eclipse.jetty.websocket/websocket-api {:mvn/version "9.4.56.v20240826"} + org.eclipse.jetty.websocket/websocket-servlet {:mvn/version "9.4.56.v20240826"} + org.eclipse.jetty.websocket/websocket-server {:mvn/version "9.4.56.v20240826"} ;; Security deps buddy/buddy-core {:mvn/version "1.11.418" :exclusions [org.bouncycastle/bcprov-jdk18on