Patch vulnerable runtime dependencies

2026-09-18 16:26:51 +02:00
parent d6c9385956
commit 03c5cc72a5
1 changed files with 7 additions and 0 deletions
@@ -3,6 +3,13 @@

 :deps    {org.clojure/clojure {:mvn/version "1.12.3"}

+           ;; Security overrides for transitive web/runtime dependencies.
+           com.fasterxml.jackson.core/jackson-core        {:mvn/version "2.21.4"}
+           com.fasterxml.jackson.core/jackson-databind    {:mvn/version "2.21.4"}
+           io.undertow/undertow-core                      {:mvn/version "2.3.21.Final"}
+           org.jboss.xnio/xnio-api                        {:mvn/version "3.8.14.Final"}
+           org.jboss.xnio/xnio-nio                        {:mvn/version "3.8.14.Final"}
+
           ;; Routing
 metosin/reitit {:mvn/version "0.9.2"}