Skip to content

Commit 8130990

Browse files
authored
fix: fix vulnerability (#4065)
1 parent ed335cd commit 8130990

File tree

1 file changed

+41
-1
lines changed

1 file changed

+41
-1
lines changed

java/openmldb-taskmanager/pom.xml

Lines changed: 41 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@
1919
<maven.compiler.source>1.8</maven.compiler.source>
2020
<maven.compiler.target>1.8</maven.compiler.target>
2121

22-
<hadoop.version>3.3.4</hadoop.version>
22+
<hadoop.version>3.4.2</hadoop.version>
2323
</properties>
2424

2525
<dependencies>
@@ -29,12 +29,43 @@
2929
<groupId>org.apache.hadoop</groupId>
3030
<artifactId>hadoop-common</artifactId>
3131
<version>${hadoop.version}</version>
32+
<exclusions>
33+
<exclusion>
34+
<groupId>io.netty</groupId>
35+
<artifactId>netty-all</artifactId>
36+
</exclusion>
37+
<exclusion>
38+
<groupId>com.google.guava</groupId>
39+
<artifactId>guava</artifactId>
40+
</exclusion>
41+
<exclusion>
42+
<groupId> org.apache.curator</groupId>
43+
<artifactId>curator-client</artifactId>
44+
</exclusion>
45+
</exclusions>
3246
</dependency>
3347

3448
<dependency>
3549
<groupId>org.apache.hadoop</groupId>
3650
<artifactId>hadoop-hdfs</artifactId>
3751
<version>${hadoop.version}</version>
52+
<exclusions>
53+
<exclusion>
54+
<groupId>io.netty</groupId>
55+
<artifactId>netty-all</artifactId>
56+
</exclusion>
57+
</exclusions>
58+
</dependency>
59+
60+
<dependency>
61+
<groupId>io.netty</groupId>
62+
<artifactId>netty-all</artifactId>
63+
<version>4.1.124.Final</version>
64+
</dependency>
65+
<dependency>
66+
<groupId>com.google.guava</groupId>
67+
<artifactId>guava</artifactId>
68+
<version>32.0.1-jre</version>
3869
</dependency>
3970

4071
<dependency>
@@ -158,13 +189,22 @@
158189
<groupId>org.yaml</groupId>
159190
<artifactId>snakeyaml</artifactId>
160191
</exclusion>
192+
<exclusion>
193+
<groupId>com.fasterxml.jackson.core</groupId>
194+
<artifactId>jackson-core</artifactId>
195+
</exclusion>
161196
</exclusions>
162197
</dependency>
163198
<dependency>
164199
<groupId>org.yaml</groupId>
165200
<artifactId>snakeyaml</artifactId>
166201
<version>2.0</version>
167202
</dependency>
203+
<dependency>
204+
<groupId>com.fasterxml.jackson.core</groupId>
205+
<artifactId>jackson-core</artifactId>
206+
<version>2.15.0</version>
207+
</dependency>
168208

169209
<!-- OpenMLDB -->
170210
<dependency>

0 commit comments

Comments
 (0)