Fix CVE-2025-27820 and CVE-2025-48734 (#383)

Signed-off-by: David Zane <[email protected]>

Author: dzane17

build.gradle

@@ -6,6 +6,7 @@ import java.nio.file.Paths
 import java.util.concurrent.Callable
 import java.util.stream.Collectors
 
+
 buildscript {
   ext {
     opensearch_version = System.getProperty("opensearch.version", "2.19.3-SNAPSHOT")
@@ -41,6 +42,32 @@ plugins {
   id 'checkstyle'
 }
 
+configurations.all {
+  resolutionStrategy {
+    eachDependency { DependencyResolveDetails details ->
+      if (details.requested.group == 'org.apache.httpcomponents.client5' &&
+        details.requested.name == 'httpclient5') {
+        details.useVersion '5.4.4'
+      }
+      if (details.requested.group == 'org.apache.httpcomponents.core5' &&
+        details.requested.name == 'httpcore5-h2') {
+        details.useVersion '5.3.4'
+      }
+      if (details.requested.group == 'org.apache.httpcomponents.core5' &&
+        details.requested.name == 'httpcore5') {
+        details.useVersion '5.3.4'
+      }
+      if (details.requested.group == 'commons-beanutils') {
+        details.useVersion '1.11.0'
+      }
+      if (details.requested.group == 'org.apache.commons' &&
+        details.requested.name == 'commons-beanutils2') {
+        details.useVersion '2.0.0-M2'
+      }
+    }
+  }
+}
+
 apply plugin: 'java'
 apply plugin: 'idea'
 apply plugin: 'eclipse'