From 24257986dece841c09ee9dd8716cf007f78c374e Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 16 Apr 2026 13:44:19 +0000
Subject: [PATCH 1/2] Initial plan


From d8d4e72d984dcd1b429d0269a8cd7e5608952a03 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 16 Apr 2026 13:45:44 +0000
Subject: [PATCH 2/2] Fix CVE-2024-7254: update protobuf-java from 3.0.2 to
 3.25.5

Agent-Logs-Url: https://github.com/OpenIdentityPlatform/OpenICF/sessions/0114b326-bb9c-498a-b863-a05f81578a4a

Co-authored-by: vharseko <6818498+vharseko@users.noreply.github.com>
---
 OpenICF-java-framework/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/OpenICF-java-framework/pom.xml b/OpenICF-java-framework/pom.xml
index 8ed4af2e..e9ed0621 100644
--- a/OpenICF-java-framework/pom.xml
+++ b/OpenICF-java-framework/pom.xml
@@ -54,7 +54,7 @@
         </openicf.osgi.remove.headers>
 
         <logback.version>1.3.15</logback.version>
-        <protobuf-java.version>3.0.2</protobuf-java.version>
+        <protobuf-java.version>3.25.5</protobuf-java.version>
 
         <!-- Core documentation properties -->
         <frDocPluginVersion>3.1.0</frDocPluginVersion>