fix: Fix CVEs (#2220)

Update dependencies to fix CVEs: Zookeeper, Netty, Jetty, Nimbus JOSE+JWT
linkedin · Nov 12, 2024 · 54078cf · 54078cf
1 parent 06a4577
commit 54078cf
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/build.gradle b/build.gradle
@@ -289,7 +289,7 @@ project(':cruise-control') {
     implementation 'com.google.code.gson:gson:2.9.0'
     implementation "org.eclipse.jetty:jetty-server:${jettyVersion}"
     implementation 'io.dropwizard.metrics:metrics-jmx:4.2.9'
-    implementation 'com.nimbusds:nimbus-jose-jwt:9.24'
+    implementation 'com.nimbusds:nimbus-jose-jwt:9.45'
     implementation 'io.swagger.parser.v3:swagger-parser-v3:2.1.16'
     implementation 'io.github.classgraph:classgraph:4.8.141'
     implementation 'com.google.code.findbugs:jsr305:3.0.2'

diff --git a/gradle.properties b/gradle.properties
@@ -3,7 +3,7 @@ org.gradle.parallel=false
 org.gradle.jvmargs=-Xms512m -Xmx512m
 scalaVersion=2.13.13
 kafkaVersion=3.5.1
-zookeeperVersion=3.8.3
-nettyVersion=4.1.100.Final
-jettyVersion=9.4.53.v20231009
+zookeeperVersion=3.9.3
+nettyVersion=4.1.114.Final
+jettyVersion=9.4.56.v20240826
 vertxVersion=4.5.8