This is an automated email from the ASF dual-hosted git repository.

dockerzhang pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/inlong.git


The following commit(s) were added to refs/heads/master by this push:
     new 818d42bd0 [INLONG-7480][CVE] Add a specified tomcat-embed-core 
dependency for fixing the CVE problem (#7481)
818d42bd0 is described below

commit 818d42bd028fb35cdd1f11101c3a39523aaeda9b
Author: CVEDetect <[email protected]>
AuthorDate: Thu Mar 2 19:28:22 2023 +0800

    [INLONG-7480][CVE] Add a specified tomcat-embed-core dependency for fixing 
the CVE problem (#7481)
---
 inlong-dataproxy/pom.xml | 5 +++++
 pom.xml                  | 1 +
 2 files changed, 6 insertions(+)

diff --git a/inlong-dataproxy/pom.xml b/inlong-dataproxy/pom.xml
index ee6cd52df..b82857050 100644
--- a/inlong-dataproxy/pom.xml
+++ b/inlong-dataproxy/pom.xml
@@ -52,6 +52,11 @@
             <artifactId>inlong-common</artifactId>
             <version>${project.version}</version>
         </dependency>
+        <dependency>
+            <groupId>org.apache.tomcat.embed</groupId>
+            <artifactId>tomcat-embed-core</artifactId>
+            <version>${tomcat.version}</version>
+        </dependency>
         <dependency>
             <groupId>org.apache.flume</groupId>
             <artifactId>flume-ng-core</artifactId>
diff --git a/pom.xml b/pom.xml
index ab6a8f77f..ce51e28ba 100644
--- a/pom.xml
+++ b/pom.xml
@@ -205,6 +205,7 @@
         <protobuf.maven.plugin.version>0.6.1</protobuf.maven.plugin.version>
         <os.maven.plugin.version>1.6.0</os.maven.plugin.version>
         <kudu.version>1.16.0</kudu.version>
+        <tomcat.version>8.5.53</tomcat.version>
     </properties>
 
     <dependencyManagement>

Reply via email to