Skip to content

Instantly share code, notes, and snippets.

View scordio's full-sized avatar

Stefano Cordio scordio

View GitHub Profile
@scordio
scordio / pom.xml
Last active September 19, 2023 16:16
A configuration for the maven-enforcer-plugin that blocks CVE vulnerable versions of common Java libraries (e.g., Log4j, Apache Commons Text, Spring Framework, Spring Boot, etc.)
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-enforcer-plugin</artifactId>
<executions>
<execution>
<id>ban-CVE-dependencies</id>
<goals>
<goal>enforce</goal>
</goals>
<configuration>