Fix vulnerabilities - Githubissues

exasol / dynamodb-virtual-schema

Virtual Schema for accessing Amazon AWS DynamoDB through Exasol

MIT License

1 stars 1 forks source link

Fix vulnerabilities #174

Closed ckunki closed 1 year ago

ckunki commented 1 year ago

org.json:json:jar:20220320 in compile
- CVE-2022-45688, severity CWE-787: Out-of-bounds Write (7.5)
commons-codec:commons-codec:jar:1.11 in runtime
- sonatype-2012-0050: 1 vulnerability (5.3)

\- com.exasol:virtual-schema-common-document:jar:9.1.2:compile
   \- com.exasol:edml-java:jar:1.1.2:compile
      \- com.github.everit-org.json-schema:org.everit.json.schema:jar:1.14.1:compile
         \- org.json:json:jar:20220320:compile

com.exasol:dynamodb-virtual-schema:jar:3.1.0
\- software.amazon.awssdk:dynamodb:jar:2.20.5:compile
   \- software.amazon.awssdk:apache-client:jar:2.20.4:runtime
      \- org.apache.httpcomponents:httpclient:jar:4.5.13:runtime
         \- commons-codec:commons-codec:jar:1.11:runtime

ckunki commented 1 year ago

fixed by https://github.com/exasol/dynamodb-virtual-schema/pull/173