Patch vulnerable runtime dependencies (#3)

Co-authored-by: Per Magnus Petersen <magnus@pmagnus.dk>
2026-09-18 14:28:45 +00:00
parent d6c9385956
commit 7e8b946ab4
1 changed files with 7 additions and 0 deletions
@@ -3,6 +3,13 @@

 :deps    {org.clojure/clojure {:mvn/version "1.12.3"}

+           ;; Security overrides for transitive web/runtime dependencies.
+           com.fasterxml.jackson.core/jackson-core        {:mvn/version "2.21.4"}
+           com.fasterxml.jackson.core/jackson-databind    {:mvn/version "2.21.4"}
+           io.undertow/undertow-core                      {:mvn/version "2.3.21.Final"}
+           org.jboss.xnio/xnio-api                        {:mvn/version "3.8.14.Final"}
+           org.jboss.xnio/xnio-nio                        {:mvn/version "3.8.14.Final"}
+
           ;; Routing
 metosin/reitit {:mvn/version "0.9.2"}