search

ring-clojure / ring-anti-forgery

Ring middleware to prevent CSRF attacks
119 stars 26 forks source link

Update Clojure to 1.9.0 (addresses CVE-2017-20189) #27

Open roberttaylor426 opened 8 months ago

roberttaylor426 commented 8 months ago

CVE-2017-20189 is a critical security vulnerability affecting versions of Clojure prior to 1.9.0.

Can we bump this project's dependency to 1.9.0 and cut a new release?

weavejester commented 8 months ago

See: https://github.com/ring-clojure/ring-ssl/pull/11