search

binkley / modern-java-practices

Modern Java/JVM Build Practices
Other
951 stars 70 forks source link

REMINDER: Check if SpotBugs has updated its dependency on BCEL #504

Closed binkley closed 6 months ago

binkley commented 6 months ago

Update the language on SpotBugs in the Use static analysis page, and check that SpotBugs has updated dependencies, and presently has no DependencyCheck violations.

SpotBugs uses an outdated version of BCEL. There is a CVE (vulnerability) aginst BCEL that is resolved, however SpotBugs uses a version of BCEL prior to the fix.

Outdated: This project uses a forced update of BCEL for SpotBugs, however that breaks the plugin (Gradle and Maven).

binkley commented 6 months ago

This issue is well-resolved by newer SpotBugs versions.