Bump commons-io from 2.8.0 to 2.17.0 - Githubissues

alphagov / notifications-java-client

Java client for the GOV.UK Notify API

https://central.sonatype.com/artifact/uk.gov.service.notify/notifications-java-client

MIT License

8 stars 30 forks source link

Bump commons-io from 2.8.0 to 2.17.0 #247

Closed mattvot closed 3 weeks ago

mattvot commented 3 weeks ago

What problem does the pull request solve?

This should resolve advisory Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader.

Checklist

[x] I’ve used the pull request template
[ ] I’ve written unit tests for these changes
[ ] I’ve updated the documentation in
- [ ] notifications-tech-docs repository
- [x] CHANGELOG.md
[x] I’ve bumped the version number
- [x] in src/main/resources/application.properties
- [x] in pom.xml