search

MeltwaterArchive / datasift-java

Java client to interface with DataSift
http://www.datasift.com/
MIT License
10 stars 7 forks source link

datasift-java affected by CVE-2016-4970 #116

Closed kentmc closed 7 years ago

kentmc commented 7 years ago

The dependency tree of datasift-java artifact with version 3.2.16 is affected by CVE-2016-4970:

+- com.datasift.client:datasift-java:jar:3.2.16 | +- com.boundary:high-scale-lib:jar:1.0.6 | +- io.higgs:http-client:jar:0.0.22 | | +- io.higgs:core:jar:0.0.22 | | - io.netty:netty-all:jar:4.0.28.Final

nicktelford commented 7 years ago

This was resolved in #117