deps: Update versions for fixes - Githubissues

datastax / cdc-apache-cassandra

Datastax CDC for Apache Cassandra

Apache License 2.0

35 stars 21 forks source link

deps: Update versions for fixes #177

Open nikhilerigila09 opened 5 months ago

nikhilerigila09 commented 5 months ago

Motivation

To Avoid the following Vulnerabilities

JSON : CVE-2023-5072
Logback-core & Logback-classic : CVE-2023-6378
Avro : CVE-2023-39410
Guava : CVE-2023-2976, CVE-2020-8908

Modifications

Upgraded Following versions -

json : 20230227 -> 20231013
logback-core : 1.2.9 -> 1.2.13
logback-classic : 1.2.9 -> 1.2.13
avro : 1.10.2 -> 1.11.3
guava : 30.1-jre -> 32.0.1-jre

Verifying this change

[X] Make sure that the change passes the CI checks.

Documentation

Check the box below.

Need to update docs?

[ ] doc-required

(If you need help on updating docs, create a doc issue)
[X] no-need-doc

(Please explain why)
[ ] doc

(If this PR contains doc changes)