Hi Charles,

*commons-httpclient* was excluded since it has some vulnerabilities. But
this library was renamed to *org.apache.httpcomponents:httpclient* and
dependency to its latest version was added to the project, so it should be
used everywhere instead of the old one.

By the way, *org.elasticsearch.client:elasticsearch-rest-client* 7.6.2 has
a dependency on *org.apache.httpcomponents:httpclient*, but not
*commons-httpclient*, so it is strange that you have some issues with the
older library.

Kind regards,
Volodymyr Vysotskyi


On Mon, Apr 20, 2020 at 4:11 AM Charles Givre <[email protected]> wrote:

> Hello all,
> I am doing some work for an Elasticsearch (ES) storage plugin.  I recently
> rebased on the current master and found that broke my plugin due to a
> dependency exclusion.  Basically, the ES modules need the
> commons-httpclient which seems to be excluded by the HBase plugin. My
> question is can I "un-exclude" it or do something in Maven so that the code
> gets these dependencies?
> Thanks,
> -- C

Reply via email to