Security Vulnerability: Latest 1.0.39 release depends on version of Kotlin with known vulnerabilities

mbknor / mbknor-jackson-jsonSchema

Generate JSON Schema with Polymorphism using Jackson annotations

MIT License

234 stars 79 forks source link

Security Vulnerability: Latest 1.0.39 release depends on version of Kotlin with known vulnerabilities #178

Open big-andy-coates opened 1 year ago

big-andy-coates commented 1 year ago

v1.0.39 of this library depends on version of version 1.3.50 of org.jetbrains.kotlin:kotlin-scripting-compiler-embeddable which depends on other libraries that have known security vulnerabilities:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29582
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24329

Updating to the 1.6.x or beyond will fix this issue.