Bump protobuf runtime to avoid CVE-2021-22569 (#2535)

1 files changed, 1 insertions, 0 deletions

diff --git a/build.sbt b/build.sbt
index b12150d2..b0d2a666 100644
--- a/build.sbt
+++ b/build.sbt
@@ -65,6 +65,7 @@ lazy val mimaSettings = Seq(
 )
 
 lazy val protobufSettings = Seq(
+  ProtobufConfig / version := "3.18.2", // CVE-2021-22569
   ProtobufConfig / sourceDirectory := baseDirectory.value / "src" / "main" / "proto",
   ProtobufConfig / protobufRunProtoc := (args => com.github.os72.protocjar.Protoc.runProtoc("-v351" +: args.toArray))
 )