Work around CVE-2025-48734

marcphilipp · marcphilipp · commit 050f42814803 · 2025-05-29T15:52:35.000+02:00
diff --git a/gradle/plugins/common/src/main/kotlin/junitbuild.checkstyle-nohttp.gradle.kts b/gradle/plugins/common/src/main/kotlin/junitbuild.checkstyle-nohttp.gradle.kts
@@ -16,6 +16,10 @@ configurations.checkstyle {
 			if (requested.group == "ch.qos.logback") {
 				useVersion(requiredVersionFromLibs("logback"))
 			}
+			// Workaround for CVE-2025-48734
+			if (requested.group == "commons-beanutils") {
+				useVersion("1.11.0")
+			}
 		}
 	}
 }

Original file line number	Diff line number	Diff line change
`@@ -16,6 +16,10 @@ configurations.checkstyle {`
`16`	`16`	`if (requested.group == "ch.qos.logback") {`
`17`	`17`	`useVersion(requiredVersionFromLibs("logback"))`
`18`	`18`	`}`
	`19`	`+ // Workaround for CVE-2025-48734`
	`20`	`+ if (requested.group == "commons-beanutils") {`
	`21`	`+ useVersion("1.11.0")`
	`22`	`+ }`
`19`	`23`	`}`
`20`	`24`	`}`
`21`	`25`	`}`