Adjusted dependency versions to address CVEs

Adjusted com.github.seancfoley:ipaddress version to address CVE. Signed-off-by: Vijayan Balasubramanian <[email protected]>
opensearch-project · Mar 12, 2024 · 1dbcdb7 · 1dbcdb7
1 parent a7ed59a
commit 1dbcdb7
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -17,6 +17,7 @@ See the [CONTRIBUTING guide](./CONTRIBUTING.md#Changelog) for instructions on ho
 ### Features
 ### Enhancements
 ### Bug Fixes
+* Adjusted dependency versions to address CVEs ([#635](https://github.com/opensearch-project/geospatial/pull/635))
 ### Infrastructure
 ### Documentation
 ### Maintenance

diff --git a/build.gradle b/build.gradle
@@ -171,7 +171,7 @@ dependencies {
     implementation "org.apache.commons:commons-csv:1.10.0"
     zipArchive group: 'org.opensearch.plugin', name:'opensearch-job-scheduler', version: "${opensearch_build}"
     compileOnly "org.opensearch:opensearch-job-scheduler-spi:${opensearch_build}"
-    implementation "com.github.seancfoley:ipaddress:5.4.0"
+    implementation "com.github.seancfoley:ipaddress:5.4.2"
 }
 
 licenseHeaders.enabled = true