From a8a61f2c440504d266f23b4f4f11a233448e0d1d Mon Sep 17 00:00:00 2001
From: Andreas Dangel <andreas.dangel@pmd-code.org>
Date: Thu, 9 Jun 2022 16:19:28 +0200
Subject: [PATCH] Upgrade io.github.classgraph:classgraph from 4.8.102 to
 4.8.112

Fixes [sonatype-2021-1074] CWE-611: Improper Restriction of XML External Entity Reference ('XXE')
---
 pom.xml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/pom.xml b/pom.xml
index 5aeded6f08..7e9aa680a8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -922,6 +922,16 @@
                 <version>13.0</version>
                 <scope>test</scope>
             </dependency>
+
+            <!-- transitive dependency through io.kotest/kotest-runner-junit5-jvm@4.4.3
+                 upgrade to 4.8.112 to fix [sonatype-2021-1074] CWE-611: Improper Restriction of XML External Entity Reference ('XXE')
+                 https://github.com/classgraph/classgraph/releases/tag/classgraph-4.8.112
+              -->
+            <dependency>
+                <groupId>io.github.classgraph</groupId>
+                <artifactId>classgraph</artifactId>
+                <version>4.8.112</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>