Skip to content

Commit 38e4a7a

Browse files
committed
Remediate CVE-2025-48734 by enforcing commons-beanutils:1.11.0 in flink-s3-fs-base
1 parent 48e90c3 commit 38e4a7a

File tree

1 file changed

+10
-4
lines changed

1 file changed

+10
-4
lines changed

flink-filesystems/flink-s3-fs-base/pom.xml

Lines changed: 10 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -39,6 +39,16 @@ under the License.
3939
</surefire.module.config>
4040
</properties>
4141

42+
<dependencyManagement>
43+
<dependencies>
44+
<dependency>
45+
<groupId>commons-beanutils</groupId>
46+
<artifactId>commons-beanutils</artifactId>
47+
<version>1.11.0</version>
48+
</dependency>
49+
</dependencies>
50+
</dependencyManagement>
51+
4252
<dependencies>
4353

4454
<!-- Flink's file system abstraction (only compiled against, not bundled) -->
@@ -187,10 +197,6 @@ under the License.
187197
<groupId>org.slf4j</groupId>
188198
<artifactId>slf4j-reload4j</artifactId>
189199
</exclusion>
190-
<exclusion>
191-
<groupId>commons-beanutils</groupId>
192-
<artifactId>commons-beanutils</artifactId>
193-
</exclusion>
194200
</exclusions>
195201
</dependency>
196202

0 commit comments

Comments
 (0)