asciidoctor / asciidoctorj

:coffee: Java bindings for Asciidoctor. Asciidoctor on the JVM!
http://asciidoctor.org
Apache License 2.0
623 stars 173 forks source link

Update jruby to 9.3.9.0 or 9.3.10.0 to resolve CVEs #1138

Closed alexlevinfr closed 1 year ago

alexlevinfr commented 1 year ago

The current version of jruby used by v2.5.7 has multiple CVEs in multiple components which have a maximum of high. Update jruby to 9.3.9.0+ please. https://github.com/jruby/jruby/releases/tag/9.3.9.0

abelsromero commented 1 year ago

Asciidoctorj v2.5.8 is available with jRuby v9.3.10.0.