Upgrade Ant to resolve vulnerabilities

sbabcoc / TestNG-Foundation

TestNG Foundation is a lightweight collection of TestNG listeners, interfaces, and static utility classes that supplement and augment the functionality provided by the TestNG API.

Apache License 2.0

13 stars 5 forks source link

Upgrade Ant to resolve vulnerabilities #51

Closed sbabcoc closed 3 years ago

sbabcoc commented 3 years ago

Upgrading the version of Ant brought in by TestNG 7.3.0 from 1.10.3 to 1.10.11. This upgrade resolves several vulnerabilities:

CVE-2021-36373 - Low: Denial of Service
CVE-2021-36374 - Low: Denial of Service
CVE-2020-11979 - Medium: insecure temporary file vulnerability
CVE-2020-1945 - Medium: insecure temporary file vulnerability