fix(sec): upgrade org.codehaus.plexus:plexus-utils to 3.0.24

eirslett / frontend-maven-plugin

"Maven-node-grunt-gulp-npm-node-plugin to end all maven-node-grunt-gulp-npm-plugins." A Maven plugin that downloads/installs Node and NPM locally, runs NPM install, Grunt, Gulp and/or Karma.

Apache License 2.0

4.24k stars 870 forks source link

fix(sec): upgrade org.codehaus.plexus:plexus-utils to 3.0.24 #1066

Closed ibug1024 closed 1 year ago

ibug1024 commented 1 year ago

What happened？

There are 2 security vulnerabilities found in org.codehaus.plexus:plexus-utils 3.0.22

MPS-2022-11760
MPS-2022-11786

What did I do？

Upgrade org.codehaus.plexus:plexus-utils from 3.0.22 to 3.0.24 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS