Fix vulnerability in org.eclipse.parsson:parsson

exasol / spark-connector

A connector for Apache Spark to access Exasol

Apache License 2.0

12 stars 7 forks source link

Closed ckunki closed 11 months ago

ckunki commented 11 months ago

org.eclipse.parsson:parsson:jar:1.1.1 in test
- CVE-2023-4043, severity CWE-20: Improper Input Validation (7.5)

Vulnerability is typically introduced via transitive test dependency exasol-testcontainers:

\- com.exasol:exasol-testcontainers:jar:6.6.2:test
   \- com.exasol:bucketfs-java:jar:3.1.0:test
      \- org.eclipse.parsson:parsson:jar:1.1.1:test