From b29039deac760052845f340f990284db017b4d93 Mon Sep 17 00:00:00 2001
From: Le-Zheng <30695225+Le-Zheng@users.noreply.github.com>
Date: Thu, 24 Feb 2022 22:38:04 -0800
Subject: [PATCH] fix high Vulnerabilities protobuf-java & akka.http (#4115)

---
 scala/dllib/pom.xml   | 10 ++++++++--
 scala/serving/pom.xml |  2 +-
 2 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/scala/dllib/pom.xml b/scala/dllib/pom.xml
index f17569b571a..c4a5a4be3d9 100644
--- a/scala/dllib/pom.xml
+++ b/scala/dllib/pom.xml
@@ -34,7 +34,7 @@
         <dependency>
             <groupId>com.google.protobuf</groupId>
             <artifactId>protobuf-java</artifactId>
-            <version>3.4.0</version>
+            <version>3.19.2</version>
         </dependency>
         <dependency>
             <groupId>org.apache.hadoop</groupId>
@@ -290,7 +290,13 @@
         <dependency>
             <groupId>org.tensorflow</groupId>
             <artifactId>proto</artifactId>
-            <version>1.15.0</version>
+	    <version>1.15.0</version>
+	    <exclusions>
+                <exclusion>
+                    <groupId>com.google.protobuf</groupId>
+                    <artifactId>protobuf-java</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
         <dependency>
             <groupId>log4j</groupId>
diff --git a/scala/serving/pom.xml b/scala/serving/pom.xml
index 17b9018e334..4ad59a64e82 100644
--- a/scala/serving/pom.xml
+++ b/scala/serving/pom.xml
@@ -13,7 +13,7 @@
     <packaging>jar</packaging>
 
     <properties>
-        <akka.http.version>10.1.11</akka.http.version>
+        <akka.http.version>10.1.15</akka.http.version>
         <akka.actor.version>2.5.26</akka.actor.version>
         <spark-scope>compile</spark-scope>
     </properties>