jankotek / mapdb

MapDB provides concurrent Maps, Sets and Queues backed by disk storage or off-heap-memory. It is a fast and easy to use embedded Java database engine.
https://mapdb.org
Apache License 2.0
4.87k stars 872 forks source link

Kotlin dependency vulnerability #988

Open jrbocarsly opened 3 years ago

jrbocarsly commented 3 years ago

Hi, We're on mapdb 3.0.8, and our security scan shows it has: CVE-2019-10101 (CVSSv3: 8.1) CVE-2019-10102 (CVSSv3: 8.1) CVE-2019-10103 (CVSSv3: 8.1) which are found in kotlin-stdlib-[common].jar 1.2.71. These issues have apparently been resolved in 1.3.30 https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&search_type=all&cpe_vendor=cpe%3A%2F%3Ajetbrains&cpe_product=cpe%3A%2F%3Ajetbrains%3Akotlin&cpe_version=cpe%3A%2F%3Ajetbrains%3Akotlin%3A1.2.71

Can we look for an update for this? Many thanks.