diff --git a/buildSrc/build.gradle b/buildSrc/build.gradle index c026e03..b75933a 100644 --- a/buildSrc/build.gradle +++ b/buildSrc/build.gradle @@ -8,7 +8,7 @@ repositories { // Mitigate CVE-2024-25710: Force commons-compress to 1.26.2 // SNYK-JAVA-ORGAPACHECOMMONS-10734078 (CVE-2025-48924): commons-lang3 requires 3.18.0+ -// Mitigate CVE-2025-8916: Force Bouncy Castle dependencies to 1.79 +// Mitigate CVE-2025-8916 and additional CVEs: Force Bouncy Castle dependencies to 1.84 configurations.all { resolutionStrategy { force "org.apache.commons:commons-compress:${commonsCompressVersion}" diff --git a/buildSrc/gradle.properties b/buildSrc/gradle.properties index 8fc1588..9f0d60b 100644 --- a/buildSrc/gradle.properties +++ b/buildSrc/gradle.properties @@ -1,3 +1,3 @@ commonsCompressVersion=1.26.2 commonsLang3Version=3.20.0 -bouncyCastleVersion=1.79 +bouncyCastleVersion=1.84 diff --git a/gradle.properties b/gradle.properties index 8fc1588..9f0d60b 100644 --- a/gradle.properties +++ b/gradle.properties @@ -1,3 +1,3 @@ commonsCompressVersion=1.26.2 commonsLang3Version=3.20.0 -bouncyCastleVersion=1.79 +bouncyCastleVersion=1.84