From a7cd266d426dec3f95b572067a96b1ec93813e56 Mon Sep 17 00:00:00 2001
From: rushirajbaxi <118249619+rushirajbaxi@users.noreply.github.com>
Date: Wed, 30 Nov 2022 13:35:05 +0530
Subject: [PATCH] Bump protobuf-java from 3.16.3 to 3.21.7 due to CVE-2022-3509
 (#2851)

* Update pom.xml

* Update pom.xml

Co-authored-by: Tijana Vislavski Gradina <tijanavg@google.com>
---
 metadata/pom.xml             | 2 +-
 tools/java/cpp-build/pom.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/metadata/pom.xml b/metadata/pom.xml
index 4781c3baf..c6a43c34f 100644
--- a/metadata/pom.xml
+++ b/metadata/pom.xml
@@ -108,7 +108,7 @@
     <dependency>
       <groupId>com.google.protobuf</groupId>
       <artifactId>protobuf-java</artifactId>
-      <version>3.16.3</version>
+      <version>3.21.7</version>
     </dependency>
 
     <!-- https://mvnrepository.com/artifact/com.google.auto.value/auto-value -->
diff --git a/tools/java/cpp-build/pom.xml b/tools/java/cpp-build/pom.xml
index 816c13679..085d0f7da 100644
--- a/tools/java/cpp-build/pom.xml
+++ b/tools/java/cpp-build/pom.xml
@@ -154,7 +154,7 @@
     <dependency>
       <groupId>com.google.protobuf</groupId>
       <artifactId>protobuf-java</artifactId>
-      <version>3.16.3</version>
+      <version>3.21.7</version>
     </dependency>
   </dependencies>