casbin / jcasbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Java
https://casbin.org
Apache License 2.0
2.4k stars 464 forks source link

Update com.github.seancfoley:ipaddress to 5.4.1+ to fix CVE-2023-50570 #375

Closed mih-kopylov closed 9 months ago

mih-kopylov commented 9 months ago

The latest version of jcasbin provies com.github.seancfoley:ipaddress:5.3.4 which is vulnurable with CVE-2023-50570.

The CVE is fixed in https://github.com/seancfoley/IPAddress/releases/tag/v5.4.1

Could you please update the dependency.

casbin-bot commented 9 months ago

@tangyang9464 @imp2002