[security] pulsar-io-kafka: upgrade jersey-bean-validation to get rid C…

…VE-2017-7536 (brought in by Hibernate Validator 5.x) (apache#13868)
rkaw92 · Jan 22, 2022 · 705e9a2 · 705e9a2
1 parent 9dbee16
commit 705e9a2
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/pulsar-io/kafka/pom.xml b/pulsar-io/kafka/pom.xml
@@ -30,6 +30,16 @@
   <artifactId>pulsar-io-kafka</artifactId>
   <name>Pulsar IO :: Kafka</name>
 
+  <dependencyManagement>
+    <dependencies>
+      <dependency>
+        <groupId>org.glassfish.jersey.ext</groupId>
+        <artifactId>jersey-bean-validation</artifactId>
+        <version>${jersey.version}</version>
+      </dependency>
+    </dependencies>
+  </dependencyManagement>
+
   <dependencies>
 
     <dependency>