This is an automated email from the ASF dual-hosted git repository.
tomsun28 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/hertzbeat.git
The following commit(s) were added to refs/heads/master by this push:
new a771df1593 [task] Upgrade transitive xercesImpl to 2.12.2
(CVE-2022-23437) (#4410)
a771df1593 is described below
commit a771df15938043101ab5bb4f11975a5e64b3aff4
Author: Reginald Alfret V <[email protected]>
AuthorDate: Mon Oct 5 07:38:10 2026 +0530
[task] Upgrade transitive xercesImpl to 2.12.2 (CVE-2022-23437) (#4410)
Signed-off-by: reginaldalfret <[email protected]>
Co-authored-by: Tomsun28 <[email protected]>
---
material/licenses/LICENSE | 2 +-
material/licenses/backend/LICENSE | 2 +-
pom.xml | 6 ++++++
3 files changed, 8 insertions(+), 2 deletions(-)
diff --git a/material/licenses/LICENSE b/material/licenses/LICENSE
index e4dc08729f..f016bec115 100644
--- a/material/licenses/LICENSE
+++ b/material/licenses/LICENSE
@@ -574,7 +574,7 @@ The text of each license is the standard Apache 2.0 license.
https://mvnrepository.com/artifact/tools.jackson.core/jackson-databind/3.1.0
Apache-2.0
https://mvnrepository.com/artifact/tools.jackson.dataformat/jackson-dataformat-xml/3.1.0
Apache-2.0
https://mvnrepository.com/artifact/tools.jackson.dataformat/jackson-dataformat-yaml/3.1.0
Apache-2.0
- https://mvnrepository.com/artifact/xerces/xercesImpl/2.11.0 Apache-2.0
+ https://mvnrepository.com/artifact/xerces/xercesImpl/2.12.2 Apache-2.0
https://mvnrepository.com/artifact/xml-apis/xml-apis/1.4.01 Apache-2.0
========================================================================
diff --git a/material/licenses/backend/LICENSE
b/material/licenses/backend/LICENSE
index f6c13a59de..2f4934f2ed 100644
--- a/material/licenses/backend/LICENSE
+++ b/material/licenses/backend/LICENSE
@@ -574,7 +574,7 @@ The text of each license is the standard Apache 2.0 license.
https://mvnrepository.com/artifact/tools.jackson.core/jackson-databind/3.1.0
Apache-2.0
https://mvnrepository.com/artifact/tools.jackson.dataformat/jackson-dataformat-xml/3.1.0
Apache-2.0
https://mvnrepository.com/artifact/tools.jackson.dataformat/jackson-dataformat-yaml/3.1.0
Apache-2.0
- https://mvnrepository.com/artifact/xerces/xercesImpl/2.11.0 Apache-2.0
+ https://mvnrepository.com/artifact/xerces/xercesImpl/2.12.2 Apache-2.0
https://mvnrepository.com/artifact/xml-apis/xml-apis/1.4.01 Apache-2.0
========================================================================
diff --git a/pom.xml b/pom.xml
index 4a08a84ce7..037cf3634e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -118,6 +118,7 @@
<javaparser.version>3.26.1</javaparser.version>
<jsqlparser.version>5.1</jsqlparser.version>
<nekohtml.version>1.9.22</nekohtml.version>
+ <xerces.version>2.12.2</xerces.version>
<json-path.version>2.9.0</json-path.version>
<gson.version>2.10.1</gson.version>
<guava.version>32.1.2-jre</guava.version>
@@ -482,6 +483,11 @@
<artifactId>spring-boot3-starter-sureness</artifactId>
<version>${spring-boot-starter-sureness.version}</version>
</dependency>
+ <dependency>
+ <groupId>xerces</groupId>
+ <artifactId>xercesImpl</artifactId>
+ <version>${xerces.version}</version>
+ </dependency>
<dependency>
<groupId>net.sourceforge.nekohtml</groupId>
<artifactId>nekohtml</artifactId>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
