From 8256832cf60f651f52851f0b2e5747749752e21f Mon Sep 17 00:00:00 2001
From: nikita15p <37657012+nikita15p@users.noreply.github.com>
Date: Thu, 27 Apr 2023 18:07:40 +0530
Subject: [PATCH] [FLUME-3472] fix vulnerability CVE 2020-1938 caused by
 tomcat-embed-core

---
 flume-parent/pom.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/flume-parent/pom.xml b/flume-parent/pom.xml
index 7ea2cb7d85..2ca526fe98 100644
--- a/flume-parent/pom.xml
+++ b/flume-parent/pom.xml
@@ -895,6 +895,11 @@ limitations under the License.
         </exclusions>
       </dependency>
 
+      <dependency>
+        <groupId>org.apache.tomcat.embed</groupId>
+        <artifactId>tomcat-embed-core</artifactId>
+        <version>9.0.68</version>
+      </dependency>
       <dependency>
         <groupId>org.apache.thrift</groupId>
         <artifactId>libthrift</artifactId>