Merge pull request zalando#566 from zalando/bugfix/CVE-2020-13956

Updated httpclient to fix CVE-2020-13956
rusiniap · Dec 10, 2020 · c5aaccb · c5aaccb
2 parents 80d6748 + 3fb298e
commit c5aaccb
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -169,6 +169,19 @@
                 </exclusion>
             </exclusions>
         </dependency>
+        <dependency>
+            <!-- CVE-2020-13956 -->
+            <groupId>org.apache.httpcomponents</groupId>
+            <artifactId>httpclient</artifactId>
+            <version>4.5.13</version>
+            <optional>true</optional>
+            <exclusions>
+                <exclusion>
+                    <groupId>commons-logging</groupId>
+                    <artifactId>commons-logging</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
         <dependency>
             <!-- CVE-2017-18640 -->
             <groupId>org.yaml</groupId>