commit 09f969a9bebe31370df64702a61420f14ead6271
author Lukasz Lenart <lukaszlenart@apache.org> Tue Apr 06 08:00:49 2021 +0200
committer Lukasz Lenart <lukaszlenart@apache.org> Tue Apr 06 08:00:49 2021 +0200
tree 59ab350a51e152a29a3919b76bc995fe4763564b
parent 04eff63445f8cce6a49c7f4bd4c0a3e2f31f16e3

Excludes vulnerable version of mxparser and uses fixed one

pom.xml

diff --git a/pom.xml b/pom.xml
index 7373522..d0122a7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1122,9 +1122,20 @@
                 <groupId>com.thoughtworks.xstream</groupId>
                 <artifactId>xstream</artifactId>
                 <version>1.4.16</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>io.github.x-stream</groupId>
+                        <artifactId>mxparser</artifactId>
+                    </exclusion>
+                </exclusions>
             </dependency>
 
             <dependency>
+                <groupId>io.github.x-stream</groupId>
+                <artifactId>mxparser</artifactId>
+                <version>1.2.1</version>
+            </dependency>
+            <dependency>
                 <groupId>javax.persistence</groupId>
                 <artifactId>persistence-api</artifactId>
                 <version>1.0.2</version>