Closed vbrandl closed 5 years ago
reflections:0.9.10 depends on guava 18, which contains a denial of service vulnerability:
reflections:0.9.10
reflections:0.9.11 depends on guava 20 (https://github.com/ronmamo/reflections/blob/master/pom.xml#L55) which does not contain the mentioned vulnerability and is still Java 7 compatible (https://github.com/google/guava/wiki/Release21#java-8)
reflections:0.9.11
Merged and released. It'll be available on Maven central in the next hours. Thank you very much @vbrandl !
reflections:0.9.10
depends on guava 18, which contains a denial of service vulnerability:reflections:0.9.11
depends on guava 20 (https://github.com/ronmamo/reflections/blob/master/pom.xml#L55) which does not contain the mentioned vulnerability and is still Java 7 compatible (https://github.com/google/guava/wiki/Release21#java-8)