From e8a4191822bafac511cdfa0393d6b5c4a9460c47 Mon Sep 17 00:00:00 2001
From: Neng Lu <nlu@streamnative.io>
Date: Thu, 3 Oct 2024 22:46:06 -0700
Subject: [PATCH] [fix][sec] Upgrade Avro to 1.11.4 to address CVE-2024-47561
 (#1073)

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 10ab662b..c96d0f74 100644
--- a/pom.xml
+++ b/pom.xml
@@ -49,7 +49,7 @@
     <jackson-databind.version>2.13.4.2</jackson-databind.version>
     <lombok.version>1.18.32</lombok.version>
     <pulsar.version>3.2.2.1</pulsar.version>
-    <avro.version>1.11.3</avro.version>
+    <avro.version>1.11.4</avro.version>
     <hadoop.version>3.3.6</hadoop.version>
     <parquet.version>1.13.1</parquet.version>
     <awsjavasdk.version>1.12.698</awsjavasdk.version>