Vulnerable dependency: resteasy-jaxrs-3.1.4.Final.jar

ContainX / openstack4j

A Fluent OpenStack SDK / Client Library for Java

http://openstack4j.com

Other

290 stars 366 forks source link

Closed ylcstarseeker closed 4 years ago

ylcstarseeker commented 4 years ago

resteasy-jaxrs-3.1.4.Final.jar depended by openstack4j 3.1.0 has a known vulnerability: https://issues.redhat.com/browse/RESTEASY-1704?_sscc=t

cosnina commented 4 years ago

Hello, any update on this issue? Thanks

olivergondza commented 4 years ago

@cosnina, this is addressed in fork https://github.com/openstack4j/openstack4j/pull/63 and will be part of the next release.