Fix vulnerability in org.eclipse.parsson:parsson

exasol / kafka-connector-extension

Exasol Kafka Extension for accessing Apache Kafka

MIT License

4 stars 7 forks source link

Closed ckunki closed 10 months ago

ckunki commented 10 months ago

org.eclipse.parsson:parsson:jar:1.1.1 in test
- CVE-2023-4043, severity CWE-20: Improper Input Validation (7.5)

Vulnerability is typically introduced via transitive test dependency exasol-test-containers:

\- com.exasol:exasol-testcontainers:jar:6.6.2:test
   \- com.exasol:bucketfs-java:jar:3.1.0:test
      \- org.eclipse.parsson:parsson:jar:1.1.1:test

kaklakariada commented 10 months ago