Merge pull request #75 from sanopsmx/OES-1.30.1

Fixed json-smart cve issue. Upgraded from 2.4.8 to 2.4.9. OP-21519
OpsMx · Jan 5, 2024 · 70bb0ab · 70bb0ab
2 parents fba332b + 5edd159
commit 70bb0ab
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/clouddriver-artifacts/clouddriver-artifacts.gradle b/clouddriver-artifacts/clouddriver-artifacts.gradle
@@ -45,7 +45,10 @@ dependencies {
     // kotlin.
     transitive = false
   }
-  implementation "com.oracle.oci.sdk:oci-java-sdk-core"
+  implementation ('com.oracle.oci.sdk:oci-java-sdk-core') {
+    exclude group: "com.nimbusds", module: "nimbus-jose-jwt:9.22"
+  }
+  implementation "com.nimbusds:nimbus-jose-jwt:9.37.3"
   implementation "com.squareup.okhttp:okhttp:2.7.5"
   implementation "com.sun.jersey:jersey-client:1.9.1"
   implementation "org.apache.commons:commons-lang3"

diff --git a/clouddriver-oracle/clouddriver-oracle.gradle b/clouddriver-oracle/clouddriver-oracle.gradle
@@ -14,7 +14,10 @@ dependencies {
   implementation "io.spinnaker.fiat:fiat-api:$fiatVersion"
   implementation "io.spinnaker.fiat:fiat-core:$fiatVersion"
   implementation "io.spinnaker.kork:kork-moniker"
-  implementation "com.oracle.oci.sdk:oci-java-sdk-core"
+  implementation ('com.oracle.oci.sdk:oci-java-sdk-core') {
+    exclude group: "com.nimbusds", module: "nimbus-jose-jwt:9.22"
+  }
+  implementation "com.nimbusds:nimbus-jose-jwt:9.37.3"
   implementation "com.oracle.oci.sdk:oci-java-sdk-identity"
   implementation "com.oracle.oci.sdk:oci-java-sdk-loadbalancer"
   implementation "com.oracle.oci.sdk:oci-java-sdk-objectstorage"