search

datacleaner / metamodel

DataCleaner fork of Apache Metamodel
Apache License 2.0
0 stars 1 forks source link

Update Apache POI dependency #6

Closed peichhorn-netgo closed 2 years ago

peichhorn-netgo commented 2 years ago

MetaModel-excel relies on an outdated version of Apache Commons Compress via Apache POI with known security issues.

I can provide a PR that updates Apache POI to 5.2.0 or at least update Apache Commons Compress to 1.21. What do you think is best here?

kaspersorensen commented 2 years ago

A PR would be very welcome

kaspersorensen commented 2 years ago

As long as we don't break existing functionality (covered by existing tests) I am all for upgrading dependencies.