From 6036b1462c8b0e853651c6edb2a155f15afabf8f Mon Sep 17 00:00:00 2001
From: Baodi Shi <baodi@apache.org>
Date: Fri, 27 Sep 2024 11:25:25 +0800
Subject: [PATCH] Fix prootbuf CVE-2024-7254 (#1068)

(cherry picked from commit f679c352af117ae9f989eb5e14df4a7a083779e0)
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 2a894f6e..d38dd01f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -59,7 +59,7 @@
     <commons-compress.version>1.26.0</commons-compress.version>
     <log4j.version>2.17.1</log4j.version>
     <json-smart.version>2.4.9</json-smart.version>
-    <protobuf3.version>3.19.6</protobuf3.version>
+    <protobuf3.version>3.25.5</protobuf3.version>
     <protoc3.version>${protobuf3.version}</protoc3.version>
     <grpc.version>1.42.1</grpc.version>
     <protoc-gen-grpc-java.version>${grpc.version}</protoc-gen-grpc-java.version>