cve

hmcts · Oct 20, 2023 · 12a6642 · 12a6642
1 parent feb5871
commit 12a6642
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -215,6 +215,13 @@ dependencies {
   // CVE fix
   implementation 'org.yaml:snakeyaml:2.2'
 
+  implementation 'org.json:json'
+  constraints {
+    implementation('org.json:json:20231013') {
+      because 'CVE-2023-5072'
+    }
+  }
+
   compileOnly group: 'org.projectlombok', name: 'lombok'
   annotationProcessor group: 'org.projectlombok', name: 'lombok'