diff --git a/plugins/azure-object-store-plugin/build.gradle b/plugins/azure-object-store-plugin/build.gradle index 1647e5a8e97..fe20ee010e7 100644 --- a/plugins/azure-object-store-plugin/build.gradle +++ b/plugins/azure-object-store-plugin/build.gradle @@ -21,10 +21,10 @@ dependencies { // Use the latest Groovy version for building this library implementation "org.codehaus.groovy:groovy:${groovyVersion}" - pluginLibs (group: 'com.microsoft.azure', name: 'azure', version: '1.3.0'){ + pluginLibs (group: 'com.microsoft.azure', name: 'azure', version: '1.41.4'){ exclude group: "com.fasterxml.jackson.core" } - pluginLibs (group: 'com.microsoft.azure', name: 'azure-storage', version: '6.1.0') { + pluginLibs (group: 'com.microsoft.azure', name: 'azure-storage', version: '8.6.6') { exclude group: "com.fasterxml.jackson.core" } @@ -37,6 +37,12 @@ dependencies { testImplementation "org.slf4j:slf4j-simple:1.6.1" testImplementation "org.codehaus.groovy:groovy-all:${groovyVersion}" testImplementation "org.spockframework:spock-core:2.0-groovy-3.0" + + constraints { + pluginLibs("net.minidev:json-smart:2.4.11") { + because "json-smart affected by CVE-2023-1370 CVE-2021-31684" + } + } } repositories {