Browse Source

AMBARI-25805 : Fix Ambari CVE velocity-1.7.jar (#3607)

himanshumaurya09876 3 years ago
parent
commit
1cf94e93b4
1 changed files with 2 additions and 2 deletions
  1. 2 2
      ambari-server/pom.xml

+ 2 - 2
ambari-server/pom.xml

@@ -1600,8 +1600,8 @@
     </dependency>
     <dependency>
       <groupId>org.apache.velocity</groupId>
-      <artifactId>velocity</artifactId>
-      <version>1.7</version>
+      <artifactId>velocity-engine-core</artifactId>
+      <version>2.3</version>
       <exclusions>
         <exclusion>
           <groupId>commons-collections</groupId>