search

ring-clojure / ring

Clojure HTTP server abstraction
MIT License
3.76k stars 520 forks source link

Update commons-fileupload to 1.5 #477

Closed danielcompton closed 1 year ago

danielcompton commented 1 year ago

1.5 doesn't contain CVE-2023-24998

weavejester commented 1 year ago

This is a little harder to fix than just upping the dependency. However, I'm working on it (see issue #476).

eudoroolivares2016 commented 1 year ago

If this gets merged, will it constitute a new release? 1.9.7? or will it be in that deployment right after the merge?

weavejester commented 1 year ago

Fixed by 1f5d1a0.

weavejester commented 1 year ago

If this gets merged, will it constitute a new release? 1.9.7? or will it be in that deployment right after the merge?

It'll probably be 1.10.0.

jdkealy commented 1 year ago

did this get merged into 1.10.0 ?

weavejester commented 1 year ago

Yes. You can check the changelog.