libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases 1 Packages Activity Actions

CVE-2022-45047 - Deserialization of Untrusted Data vulnerability in org.apache.sshd:sshd-common

Browse source 
Resolves #16779
This commit is contained in:
Bruno Oliveira da Silva 2023-02-01 20:24:18 -03:00
parent d32cc7c3f9
commit 963b7fbc9d
1 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
pom.xml
View file

@ -121,7 +121,8 @@
<okhttp.version>4.10.0</okhttp.version>
<!-- Override of SnakeYAML to fix multiple CVEs -->
<org.yaml.snakeyaml.version>1.33</org.yaml.snakeyaml.version>
<!-- Override sshd-common to fix CVE-2022-45047 -->
<org.apache.sshd.version>2.9.2</org.apache.sshd.version>
<!-- Openshift -->
<version.com.openshift.openshift-restclient-java>9.0.5.Final</version.com.openshift.openshift-restclient-java>
@ -301,6 +302,11 @@
<artifactId>snakeyaml</artifactId>
<version>${org.yaml.snakeyaml.version}</version>
</dependency>
<dependency>
<groupId>org.apache.sshd</groupId>
<artifactId>sshd-common</artifactId>
<version>${org.apache.sshd.version}</version>
</dependency>
<dependency>
<groupId>org.keycloak</groupId>
<artifactId>keycloak-dependencies-admin-ui-wrapper</artifactId>