Fixes CVE-2022-42920 by forcing bcel version to resovle to 6.6 (#2275)

Signed-off-by: Darshit Chanpura <dchanp@amazon.com> Signed-off-by: Darshit Chanpura <35282393+DarshitChanpura@users.noreply.github.com>
opensearch-project · Nov 29, 2022 · cad7c72 · cad7c72
1 parent 79f2079
commit cad7c72
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -262,6 +262,7 @@ configurations {
             force "io.netty:netty-handler:${versions.netty}"
             force "io.netty:netty-transport:${versions.netty}"
             force "io.netty:netty-transport-native-unix-common:${versions.netty}"
+            force "org.apache.bcel:bcel:6.6.0" // This line should be removed once Spotbugs is upgraded to 4.7.4
         }
     }