New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dependency upgrade #57

Closed

ckunki opened this issue Jul 3, 2023 · 0 comments · Fixed by #58

Assignees

Labels

security

Contributor

ckunki commented Jul 3, 2023 •

edited

Loading

See log messages from build job Dependency Check:

io.netty:netty-handler:jar:4.1.86.Final (provided)
- CVE-2023-34462, severity CWE-770: Allocation of Resources Without Limits or Throttling (6.5)

Excluded vulnerabilities:

[CVE-2020-36641] CWE-611: Improper Restriction of XML External Entity Reference ('XXE') (9.8); https://ossindex.sonatype.org/vulnerability/CVE-2020-36641?component-type=maven&component-name=fr.turri%2FaXMLRPC&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1

ckunki added the security label

kaklakariada self-assigned this

kaklakariada added a commit that referenced this issue


          #57: Updated dependencies

78b8d14

kaklakariada mentioned this issue

#57: Updated dependencies #58

Merged

kaklakariada closed this as completed in #58

kaklakariada added a commit that referenced this issue


          #57: Updated dependencies (#58)

826d95a

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment