Accessors-smart v2.5.1 is flagged as High CVE

netplex / json-smart-v2

Apache License 2.0

151 stars 68 forks source link

Accessors-smart v2.5.1 is flagged as High CVE #204

Closed pillays99 closed 3 months ago

pillays99 commented 4 months ago

Accessors-smart v2.5.1 is reported against the following CVEs:

CVE-2022-45688
CVE-2023-5072

This is flagged on OWASP's Dependency-Check which retrieves data from the National Vulnerability Database.

Kindly update as our tools have detected the mentioned CVE.

tyluffy commented 3 months ago

json-smart does not use JSON-java or hutool

shoothzj commented 3 months ago

@pillays99 It seems you misreport this issue to json-smart project? json-smart does not use JSON-java or hutool. Feel free to reopen this issue if you still have other questions.