chore(deps): transitive dependency forced to overcome a CVE

augi · augi · commit be5b7f551e71 · 2024-05-27T10:21:51.000+02:00
diff --git a/build.sbt b/build.sbt
@@ -210,6 +210,7 @@ lazy val statsd = (project in file("statsd"))
     name := "metrics-statsd",
     libraryDependencies ++= Seq(
       "com.datadoghq" % "java-dogstatsd-client" % "2.13.1",
+      "com.github.jnr" % "jnr-unixsocket" % "0.38.22", // CVE-2014-4043
       "org.slf4j" % "slf4j-api" % Versions.slf4j
     )
   )

Original file line number	Diff line number	Diff line change
`@@ -210,6 +210,7 @@ lazy val statsd = (project in file("statsd"))`
`210`	`210`	`name := "metrics-statsd",`
`211`	`211`	`libraryDependencies ++= Seq(`
`212`	`212`	`"com.datadoghq" % "java-dogstatsd-client" % "2.13.1",`
	`213`	`+ "com.github.jnr" % "jnr-unixsocket" % "0.38.22", // CVE-2014-4043`
`213`	`214`	`"org.slf4j" % "slf4j-api" % Versions.slf4j`
`214`	`215`	`)`
`215`	`216`	`)`