summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorvasraz <vasyl.razinkov@est.tech>2022-08-20 18:12:07 +0100
committerMichael Morris <michael.morris@est.tech>2022-08-26 09:05:15 +0000
commit9aef1231359278f1827d7523afd3369935b89f5b (patch)
tree6a521ab792e6bd5a1d802ed6307c13f82f7b6146
parent12af6a010abc5e12030933e9d192ed712dfc99cb (diff)
Remove vulnerable dependency
Remove/update org.apache.tinkerpop:gremlin-core Signed-off-by: Vasyl Razinkov <vasyl.razinkov@est.tech> Change-Id: Id41e2d0d089e5071c9923297c55bf31d9a57189f Issue-ID: SDC-4017
-rw-r--r--asdctool/pom.xml4
-rw-r--r--catalog-be/pom.xml4
-rw-r--r--catalog-dao/pom.xml9
-rw-r--r--catalog-model/pom.xml6
-rw-r--r--integration-tests/pom.xml4
5 files changed, 26 insertions, 1 deletions
diff --git a/asdctool/pom.xml b/asdctool/pom.xml
index 2559a9fe5e..fd059438b1 100644
--- a/asdctool/pom.xml
+++ b/asdctool/pom.xml
@@ -304,8 +304,12 @@
<scope>compile</scope>
<exclusions>
<exclusion>
+ <groupId>org.apache.tinkerpop</groupId>
<artifactId>gremlin-groovy</artifactId>
+ </exclusion>
+ <exclusion>
<groupId>org.apache.tinkerpop</groupId>
+ <artifactId>gremlin-core</artifactId>
</exclusion>
<exclusion>
<groupId>org.json</groupId>
diff --git a/catalog-be/pom.xml b/catalog-be/pom.xml
index 1ade155d1a..bacdda38fd 100644
--- a/catalog-be/pom.xml
+++ b/catalog-be/pom.xml
@@ -474,8 +474,12 @@
<scope>compile</scope>
<exclusions>
<exclusion>
+ <groupId>org.apache.tinkerpop</groupId>
<artifactId>gremlin-groovy</artifactId>
+ </exclusion>
+ <exclusion>
<groupId>org.apache.tinkerpop</groupId>
+ <artifactId>gremlin-core</artifactId>
</exclusion>
<exclusion>
<groupId>org.json</groupId>
diff --git a/catalog-dao/pom.xml b/catalog-dao/pom.xml
index 1bb9c95ce2..e2a1effc57 100644
--- a/catalog-dao/pom.xml
+++ b/catalog-dao/pom.xml
@@ -286,14 +286,23 @@ Modifications copyright (c) 2018 Nokia
</dependency>
<dependency>
+ <groupId>org.apache.tinkerpop</groupId>
+ <artifactId>gremlin-core</artifactId>
+ <version>3.4.13</version>
+ </dependency>
+ <dependency>
<groupId>org.janusgraph</groupId>
<artifactId>janusgraph-core</artifactId>
<version>${janusgraph.version}</version>
<scope>provided</scope>
<exclusions>
<exclusion>
+ <groupId>org.apache.tinkerpop</groupId>
<artifactId>gremlin-groovy</artifactId>
+ </exclusion>
+ <exclusion>
<groupId>org.apache.tinkerpop</groupId>
+ <artifactId>gremlin-core</artifactId>
</exclusion>
<exclusion>
<groupId>org.json</groupId>
diff --git a/catalog-model/pom.xml b/catalog-model/pom.xml
index 9fcc01c4e8..1c37f0d935 100644
--- a/catalog-model/pom.xml
+++ b/catalog-model/pom.xml
@@ -189,8 +189,12 @@
<scope>provided</scope>
<exclusions>
<exclusion>
- <artifactId>gremlin-groovy</artifactId>
<groupId>org.apache.tinkerpop</groupId>
+ <artifactId>gremlin-core</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.apache.tinkerpop</groupId>
+ <artifactId>gremlin-groovy</artifactId>
</exclusion>
<exclusion>
<groupId>org.json</groupId>
diff --git a/integration-tests/pom.xml b/integration-tests/pom.xml
index a811093d2a..175e45b19e 100644
--- a/integration-tests/pom.xml
+++ b/integration-tests/pom.xml
@@ -146,8 +146,12 @@ limitations under the License.
<scope>test</scope>
<exclusions>
<exclusion>
+ <groupId>org.apache.tinkerpop</groupId>
<artifactId>gremlin-groovy</artifactId>
+ </exclusion>
+ <exclusion>
<groupId>org.apache.tinkerpop</groupId>
+ <artifactId>gremlin-core</artifactId>
</exclusion>
<exclusion>
<artifactId>slf4j-log4j12</artifactId>