From 67d1ae8c9ef2e871645dc58fe556a390d38f376e Mon Sep 17 00:00:00 2001
From: Keegan Witt <keeganwitt@gmail.com>
Date: Wed, 5 Jun 2024 21:00:34 -0400
Subject: [PATCH] Fix CVE-2024-36124

---
 pom.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/pom.xml b/pom.xml
index 1436d8bf..410659d2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -84,6 +84,13 @@
       <version>3.3.3</version>
       <scope>runtime</scope>
     </dependency>
+    <dependency>
+      <!-- fix CVE-2024-36124 from org.apache.maven:maven-archiver -->
+      <groupId>org.iq80.snappy</groupId>
+      <artifactId>snappy</artifactId>
+      <version>0.5</version>
+      <scope>runtime</scope>
+    </dependency>
     <!-- main groovy support -->
     <dependency>
       <groupId>${groovyGroupId}</groupId>