Bumps org.json to a version that is unaffected by CVE-2022-45688 - Githubissues

alphagov / notifications-java-client

Java client for the GOV.UK Notify API

https://central.sonatype.com/artifact/uk.gov.service.notify/notifications-java-client

MIT License

8 stars 30 forks source link

Bumps org.json to a version that is unaffected by CVE-2022-45688 #215

Closed idavidmcdonald closed 1 year ago

idavidmcdonald commented 1 year ago

We don't do any XML parsing in the client anyway but this change will

make sure if we ever did, we would not be affected
remove any warnings for a security vulnerability in our API client which may be reported by users or worry our users

What problem does the pull request solve?

Checklist

[x] I’ve used the pull request template
[ ] I’ve written unit tests for these changes
[ ] I’ve update the documentation (in DOCUMENTATION.md)
[x] I’ve bumped the version number
- [x] in src/main/resources/application.properties
- [x] in pom.xml