Dependency upgrade - Githubissues

exasol / udf-debugging-java

Utilities for debugging, profiling and code coverage measure for UDFs.

MIT License

1 stars 1 forks source link

Dependency upgrade #57

Closed ckunki closed 1 year ago

ckunki commented 1 year ago

See log messages from build job Dependency Check:

io.netty:netty-handler:jar:4.1.86.Final (provided)
- CVE-2023-34462, severity CWE-770: Allocation of Resources Without Limits or Throttling (6.5)

Excluded vulnerabilities:

[CVE-2020-36641] CWE-611: Improper Restriction of XML External Entity Reference ('XXE') (9.8); https://ossindex.sonatype.org/vulnerability/CVE-2020-36641?component-type=maven&component-name=fr.turri%2FaXMLRPC&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1