feature/PM-62906: removed CVE-2024-26308 CVE-2024-25710 from commons-…

…compress (#3) feature/PM-62906: removed CVE-2024-26308 CVE-2024-25710 from commons-compress
Accenture · Mar 19, 2024 · 061462b · 061462b
1 parent eb24ec2
commit 061462b
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/data-quality-profiler/build.sbt b/data-quality-profiler/build.sbt
@@ -22,6 +22,9 @@ libraryDependencies += "org.apache.hadoop" % "hadoop-aws" % sparkVersion % "prov
 
 libraryDependencies += "com.crealytics" %% "spark-excel" % "0.14.0"
 
+dependencyOverrides += "org.apache.commons" % "commons-compress" % "1.26.0"
+dependencyOverrides += "commons-io" % "commons-io" % "2.8.0"
+
 libraryDependencies += "org.rogach" %% "scallop" % "4.0.4"
 
 libraryDependencies += "org.apache.logging.log4j" % "log4j" % "2.16.0"