From 7e8b946ab420f18cd792d57d66f0eccc976b41ef Mon Sep 17 00:00:00 2001 From: Per Magnus Petersen Date: Fri, 18 Sep 2026 14:28:45 +0000 Subject: [PATCH] Patch vulnerable runtime dependencies (#3) Co-authored-by: Per Magnus Petersen --- deps.edn | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/deps.edn b/deps.edn index a6d2f39..5d83ff6 100644 --- a/deps.edn +++ b/deps.edn @@ -3,6 +3,13 @@ :deps {org.clojure/clojure {:mvn/version "1.12.3"} + ;; Security overrides for transitive web/runtime dependencies. + com.fasterxml.jackson.core/jackson-core {:mvn/version "2.21.4"} + com.fasterxml.jackson.core/jackson-databind {:mvn/version "2.21.4"} + io.undertow/undertow-core {:mvn/version "2.3.21.Final"} + org.jboss.xnio/xnio-api {:mvn/version "3.8.14.Final"} + org.jboss.xnio/xnio-nio {:mvn/version "3.8.14.Final"} + ;; Routing metosin/reitit {:mvn/version "0.9.2"}