se-edu / addressbook-level3

:ab::three: Address Book sample application (Level 3)
https://se-education.org/addressbook-level3
MIT License
28 stars 415 forks source link

Jackson Dependency has vulnerable version #158

Open yhtMinceraft1010X opened 1 year ago

yhtMinceraft1010X commented 1 year ago

The dependencies are shown below: https://github.com/se-edu/addressbook-level3/blob/928f14660452b529512dfcaa90f459ecdb744dca/build.gradle#L60-L61

The corresponding report regarding the dependencies is given in the below file: AB3 Dependency-Check Report.pdf

It is recommended to upgrade to at least 2.9.8. However, an issue regarding relative path serialization is causing some test cases to fail due to the output paths being absolute.