force upgrade to dependency of a dependency to fix CVE-2023-37460 (#50)

windup · Oct 19, 2023 · 28210f4 · 28210f4
1 parent 3005d49
commit 28210f4
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -199,6 +199,13 @@
             <scope>test</scope>
         </dependency>
 
+        <dependency>
+            <groupId>org.codehaus.plexus</groupId>
+            <artifactId>plexus-archiver</artifactId>
+            <version>4.8.0</version>
+            <scope>test</scope>
+        </dependency>
+
         <dependency>
             <groupId>org.eclipse.platform</groupId>
             <artifactId>org.eclipse.core.resources</artifactId>