chore: upgrade protobuf-java version to fix CVE-2024-7254 (#162)

Signed-off-by: Keran Yang <[email protected]>
numaproj · Jan 22, 2025 · 38be808 · 38be808
1 parent a2c51c2
commit 38be808
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pom.xml b/pom.xml
@@ -22,7 +22,7 @@
 
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-        <protobuf.version>3.21.8</protobuf.version>
+        <protobuf.version>4.28.2</protobuf.version>
         <grpc.version>1.65.0</grpc.version>
         <netty.version>4.1.111.Final</netty.version> <!-- match version grpc-netty depends on -->
         <akka.version>2.8.5</akka.version>