Pin version to fix CVE

RISDEV-0000
digitalservicebund · Dec 27, 2024 · b000785 · b000785
1 parent e82a388
commit b000785
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/backend/build.gradle.kts b/backend/build.gradle.kts
@@ -160,6 +160,8 @@ dependencies {
 
     implementation("org.springframework.cloud:spring-cloud-starter-kubernetes-client-config:3.1.4")
 
+    // CVE-2024-50379
+    implementation ("org.apache.tomcat.embed:tomcat-embed-core:10.1.34")
     // CVE-2024-26308
     implementation("org.apache.commons:commons-compress:1.27.1")
     // CVE-2022-3171