Fix vulnerability in org.eclipse.parsson:parsson - Githubissues

exasol / exasol-virtual-schema

Virtual Schema from Exasol to Exasol

MIT License

1 stars 2 forks source link

Fix vulnerability in org.eclipse.parsson:parsson #114

Closed ckunki closed 9 months ago

ckunki commented 9 months ago

org.eclipse.parsson:parsson:jar:1.1.1 in test
- CVE-2023-4043, severity CWE-20: Improper Input Validation (7.5)

Vulnerability is typically introduced via transitive test dependency exasol-test-containers:

\- com.exasol:exasol-testcontainers:jar:6.6.2:test
   \- com.exasol:bucketfs-java:jar:3.1.0:test
      \- org.eclipse.parsson:parsson:jar:1.1.1:test