Warning for cve - Githubissues

Alvinn8 / paper-nms-maven-plugin

A maven plugin for using NMS on paper with Mojang mappings.

MIT License

112 stars 9 forks source link

Warning for cve #21

Closed Doc94 closed 8 months ago

Doc94 commented 1 year ago

Its a little anoying see the warning in the IDE for old CVE related to COMMONS-CODEC in dependency. in teory that was fixed many versions ago.

Alvinn8 commented 1 year ago

That seems like a library that Spigot includes (through maven-resolver-transport-http). This plugin exposes the jar with internals from the paper dev bundle as is, so I don't know if there is any appropriate fix for this from the paper-nms-maven-plugin's side since that would have to involve changing what dependencies the server jar has if that makes sense.