snuyanzin commented on code in PR #25573:
URL: https://github.com/apache/flink/pull/25573#discussion_r1857314934
##########
flink-table/flink-table-calcite-bridge/pom.xml:
##########
@@ -152,9 +152,21 @@ under the License.
<groupId>org.locationtech.proj4j</groupId>
<artifactId>proj4j</artifactId>
</exclusion>
+ <!-- Exclude json-path as we are manually
overriding it to a newer version -->
+ <exclusion>
+ <groupId>com.jayway.jsonpath</groupId>
+ <artifactId>json-path</artifactId>
+ </exclusion>
</exclusions>
</dependency>
+ <!-- Override the json-path version used by Calcite 1.32 to
deal with CVE-2023-1370 -->
+ <dependency>
+ <groupId>com.jayway.jsonpath</groupId>
+ <artifactId>json-path</artifactId>
+ <version>2.9.0</version>
Review Comment:
```suggestion
<version>${jsonpath.version}</version>
```
I guess we can reuse properties instead of hard coded values, can't we?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscr...@flink.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
