From dc5480073571185e47d4e09446058ea5867881dd Mon Sep 17 00:00:00 2001
From: Keegan Witt <keeganwitt@gmail.com>
Date: Thu, 28 Sep 2023 14:58:11 -0400
Subject: [PATCH] Fix CVE-2023-42503

---
 pom.xml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pom.xml b/pom.xml
index 5405026d..b03a3193 100644
--- a/pom.xml
+++ b/pom.xml
@@ -71,6 +71,12 @@
       <artifactId>plexus-archiver</artifactId>
       <version>4.8.0</version>
     </dependency>
+    <dependency>
+      <!-- fix CVE-2023-42503 from org.codehaus.plexus:plexus-archiver -->
+      <groupId>org.apache.commons</groupId>
+      <artifactId>commons-compress</artifactId>
+      <version>1.24.0</version>
+    </dependency>
     <dependency>
       <groupId>org.apache.maven.shared</groupId>
       <artifactId>file-management</artifactId>