There is a vulnerability in Simple Logging Facade for Java (SLF4J) 1.7.22,upgrade recommended

microsoft / botbuilder-java

The Microsoft Bot Framework provides what you need to build and connect intelligent bots that interact naturally wherever your users are talking, from text/sms to Skype, Slack, Office 365 mail and other popular services.

http://botframework.com

MIT License

180 stars 117 forks source link

There is a vulnerability in Simple Logging Facade for Java (SLF4J) 1.7.22,upgrade recommended #1487

Closed QiAnXinCodeSafe closed 2 years ago

QiAnXinCodeSafe commented 2 years ago

https://github.com/microsoft/botbuilder-java/blob/fd8ceb672fc1da2488711210cbbfd62b39b54919/pom.xml#L317-L321

CVE-2018-8088

Recommended upgrade version：1.7.26

tracyboehrer commented 2 years ago

Fixed in prior PR