ClearTK / cleartk

Machine learning components for Apache UIMA
http://cleartk.github.io/cleartk/
Other
129 stars 58 forks source link

Clear TK uses org.apache.opennlp:opennlp-tools:1.5.3 which contains know security issue - should be upgraded to, at-least, 1.8.2 #435

Closed joelpeddie closed 1 year ago

joelpeddie commented 5 years ago

https://www.sourceclear.com/vulnerability-database/vulnerabilities/5215

reckart commented 1 year ago

Do you know how to do the upgrade?

See: https://lists.apache.org/thread/r4wj097ombgf18hyyv85p4hlcly56fqc

reckart commented 1 year ago

Included in https://github.com/ClearTK/cleartk/issues/448