Merge pull request #1227 from kermitt2/update-analyzers-lib

Fix for CVE in CommonsIO
kermitt2 · Jan 16, 2025 · a638a69 · a638a69
2 parents ed420e4 + 12a0ca3
commit a638a69
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/build.gradle b/build.gradle
@@ -132,7 +132,7 @@ subprojects {
         implementation "com.cybozu.labs:langdetect:1.1-20120112"
         implementation "com.rockymadden.stringmetric:stringmetric-core_2.11:0.27.4"
         implementation "commons-pool:commons-pool:1.6"
-        implementation "commons-io:commons-io:2.5"
+        implementation "commons-io:commons-io:2.14.0"
         implementation "org.apache.commons:commons-lang3:3.6"
         implementation "org.apache.commons:commons-collections4:4.1"
         implementation 'org.apache.commons:commons-text:1.11.0'
@@ -245,7 +245,7 @@ project("grobid-core") {
         api "xerces:xercesImpl:2.12.0"
         api "net.arnx:jsonic:1.3.10"
         api "net.sf.saxon:Saxon-HE:9.6.0-9"
-        api "xom:xom:1.3.2"
+        api "xom:xom:1.3.9"
         api 'javax.xml.bind:jaxb-api:2.3.0'
 
         implementation "joda-time:joda-time:2.9.9"

diff --git a/grobid-core/localLibs/wipo-analysers-0.0.2.jar b/grobid-core/localLibs/wipo-analysers-0.0.2.jar