guardian / giant

Platform for journalists to search, analyse, categorise and share unstructured data
Apache License 2.0
53 stars 3 forks source link

upgrading tika to 2.9.1 to fix SNYK-JAVA-ORGAPACHECOMMONS-6254296 #203

Closed srbd closed 8 months ago

srbd commented 8 months ago

What does this change?

Upgrading commons-compress to fix https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-6254296

(previously tried upgrading tika but is uses conflicting versions of jackson-databind to play which results in a runtime error (tika uses 2.15.2, play uses 2.14.3)

How to test

Deployed and tested to CODE

philmcmahon commented 8 months ago

tiker