Decompressors can crash the JVM and leak memory content in Aircompre…

…ssor
InseeFr · Jun 11, 2024 · 7d02c20 · 7d02c20
1 parent 397bb28
commit 7d02c20
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/kraftwerk-core/pom.xml b/kraftwerk-core/pom.xml
@@ -107,6 +107,10 @@
 					<groupId>org.apache.commons</groupId>
 					<artifactId>commons-compress</artifactId>
 				</exclusion>
+				<exclusion>
+					<artifactId>aircompressor</artifactId>
+					<groupId>io.airlift</groupId>
+				</exclusion>
 			</exclusions>
 		</dependency>
 		<dependency>