search

gravity9-tech / json-patch-path

An RFC 6902 (JSON Patch) and reverse, plus RFC 7386 (JSON Merge Patch), implementation in Java using Jackson (2.x)
Other
11 stars 2 forks source link

Fixed most CVE vulnerabilities #12

Closed BartekGravity closed 1 year ago

BartekGravity commented 1 year ago

Fixed most CVE vulnerabilities found in dependencies.

Added CVE checker for gradle.

The only vulnerabilities left are within guava (which is used in errorprone):

guava-31.1-jre.jar (pkg:maven/com.google.guava/guava@31.1-jre, cpe:2.3:a:google:guava:31.1:::::::*) : CVE-2023-2976, CVE-2020-8908

The above issue will not be fixed.