diff --git a/build.gradle b/build.gradle index 991f47a5..46b6af9a 100644 --- a/build.gradle +++ b/build.gradle @@ -270,11 +270,11 @@ dependencies { implementation group: 'org.springframework.cloud', name: 'spring-cloud-config-server', version: '3.1.5' implementation group: 'org.springframework.cloud', name: 'spring-cloud-starter-bootstrap', version: '3.1.0' // Fix for CVE-2023-34040 - // Fix for CVE-2022-45047 - implementation group: 'org.apache.sshd', name: 'sshd-common', version: '2.9.2' - implementation group: 'org.apache.sshd', name: 'sshd-core', version: '2.9.2' - implementation group: 'org.apache.sshd', name: 'sshd-osgi', version: '2.9.2' - implementation group: 'org.apache.sshd', name: 'sshd-sftp', version: '2.9.2' + // Fix for CVE-2022-45047, CVE-2023-35887 + implementation group: 'org.apache.sshd', name: 'sshd-common', version: '2.9.3' + implementation group: 'org.apache.sshd', name: 'sshd-core', version: '2.9.3' + implementation group: 'org.apache.sshd', name: 'sshd-osgi', version: '2.9.3' + implementation group: 'org.apache.sshd', name: 'sshd-sftp', version: '2.9.3' implementation ('com.github.hmcts:properties-volume-spring-boot-starter:0.1.0'){ exclude group: 'org.glassfish', module: 'jakarta.el'