service-cloud-voice / ServiceCloudVoiceLambdas

This application provides a set of Lambda functions, which are available within your Amazon Connect instance after provisioning the instance with your Service Cloud Voice contact center. You can use these Lambdas in Amazon Connect contact flows.
BSD 3-Clause "New" or "Revised" License
14 stars 18 forks source link

fix: CVE-2023-44487 #86

Open vgw-chriskruger opened 2 months ago

vgw-chriskruger commented 2 months ago

This should address CVE-2023-44487 with the upgrade of the aws sdk - https://github.com/aws/aws-sdk-java-v2/issues/4619

This should at least partially address https://github.com/service-cloud-voice/ServiceCloudVoiceLambdas/issues/85

If there is concern that 2.26.6 is too big a jump. 2.21.46 may be a more conservative choice that also fixes the probelm.

jinalkathiara commented 1 week ago

Thanks @vgw-chriskruger we will evaluate it and merge this