atomashpolskiy / bt

BitTorrent library and client with DHT, magnet links, encryption and more
https://atomashpolskiy.github.io/bt/
Apache License 2.0
2.4k stars 382 forks source link

fix(sec): upgrade org.apache.logging.log4j:log4j-core to 2.17.1 #226

Open LyonLee-Viktor opened 1 year ago

LyonLee-Viktor commented 1 year ago

What happened?

There are 1 security vulnerabilities found in org.apache.logging.log4j:log4j-core 2.17.0

What did I do?

Upgrade org.apache.logging.log4j:log4j-core from 2.17.0 to 2.17.1 for vulnerability fix

What did you expect to happen?

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS