Merge pull request #130 from guardian/an/bouncycastle-jdk8

CVE-2023-33202: replace jdk1.5 bouncycastle with 1.8, then upgrade to receive CVE fix
guardian · Nov 30, 2023 · 505d975 · 505d975
2 parents 0854755 + c0121ee
commit 505d975
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -45,7 +45,7 @@ object Dependencies {
   )
 
   val cryptoDependencies = Seq(
-    "org.bouncycastle" % "bcprov-jdk15on" % "1.69",
+    "org.bouncycastle" % "bcprov-jdk18on" % "1.77",
     "commons-codec" % "commons-codec" % "1.14"
   )