Fix transformer CVEs

snowplow · Nov 29, 2023 · 7f506c9 · 7f506c9
1 parent 162d4e0
commit 7f506c9
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -61,7 +61,7 @@ object Dependencies {
     val snowflakeJdbc    = "3.13.30"
     val enumeratum       = "1.7.0"
     val aws              = "1.12.261"
-    val aws2             = "2.18.8"
+    val aws2             = "2.21.33"
     val jSch             = "0.2.1"
     val sentry           = "1.7.30"
     val protobuf         = "3.21.7" // Fix CVE
@@ -70,6 +70,7 @@ object Dependencies {
     val jettison         = "1.5.4" // Fix CVE
     val reactorNetty     = "1.0.39" // Fix CVE
     val jettyHttp        = "9.4.53.v20231009" // Fix CVE
+    val zookeeper        = "3.7.2" // Fix CVE
 
     // Scala (test only)
     val specs2           = "4.17.0"
@@ -194,6 +195,7 @@ object Dependencies {
   val aws2sts           = "software.amazon.awssdk" % "sts"                      % V.aws2        % Runtime
   val protobuf          = "com.google.protobuf"    % "protobuf-java"            % V.protobuf
   val nettyCodec        = "io.netty"               % "netty-codec"              % V.nettyCodec
+  val zookeeper         = "org.apache.zookeeper"   % "zookeeper"                % V.zookeeper
 
   // Scala (test only)
   val specs2            = "org.specs2"                 %% "specs2-core"                   % V.specs2            % Test
@@ -345,7 +347,8 @@ object Dependencies {
     specs2ScalaCheck,
     scalaCheck,
     catsEffectTestkit,
-    catsTesting
+    catsTesting,
+    zookeeper
   )