GUACAMOLE-1859: Update xmlsec to 2.2.6 (transitive dependency of SAML).

This commit is contained in:
Mike Jumper
2023-12-01 11:05:56 -08:00
parent df7309c1f3
commit 1b11b31045
5 changed files with 27 additions and 7 deletions

View File

@@ -74,15 +74,26 @@
<groupId>com.onelogin</groupId>
<artifactId>java-saml</artifactId>
<version>2.9.0</version>
<!--
Replace vulnerable version of Woodstox until upstream
releases a version with fixed dependencies
-->
<exclusions>
<!--
Replace vulnerable version of Woodstox until upstream
releases a version with fixed dependencies
-->
<exclusion>
<groupId>com.fasterxml.woodstox</groupId>
<artifactId>woodstox-core</artifactId>
</exclusion>
<!--
Replace vulnerable version of xmlsec until upstream
releases a version with fixed dependencies
-->
<exclusion>
<groupId>org.apache.santuario</groupId>
<artifactId>xmlsec</artifactId>
</exclusion>
</exclusions>
</dependency>
@@ -93,6 +104,13 @@
<version>5.4.0</version>
</dependency>
<!-- Apache XML Security for Java -->
<dependency>
<groupId>org.apache.santuario</groupId>
<artifactId>xmlsec</artifactId>
<version>2.2.6</version>
</dependency>
</dependencies>
</project>