From 03c5cc72a5e425498b06eace4b89ba065ee0e645 Mon Sep 17 00:00:00 2001
From: Per Magnus Petersen <magnus@pmagnus.dk>
Date: Fri, 18 Sep 2026 16:26:51 +0200
Subject: [PATCH] Patch vulnerable runtime dependencies

---
 deps.edn | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/deps.edn b/deps.edn
index a6d2f39..5d83ff6 100644
--- a/deps.edn
+++ b/deps.edn
@@ -3,6 +3,13 @@
 
  :deps    {org.clojure/clojure {:mvn/version "1.12.3"}
 
+           ;; Security overrides for transitive web/runtime dependencies.
+           com.fasterxml.jackson.core/jackson-core        {:mvn/version "2.21.4"}
+           com.fasterxml.jackson.core/jackson-databind    {:mvn/version "2.21.4"}
+           io.undertow/undertow-core                      {:mvn/version "2.3.21.Final"}
+           org.jboss.xnio/xnio-api                        {:mvn/version "3.8.14.Final"}
+           org.jboss.xnio/xnio-nio                        {:mvn/version "3.8.14.Final"}
+
            ;; Routing
  metosin/reitit {:mvn/version "0.9.2"}