search

socketio / socket.io-client-java

Full-featured Socket.IO Client Library for Java, which is compatible with Socket.IO v1.0 and later.
https://socketio.github.io/socket.io-client-java/installation.html
Other
5.34k stars 977 forks source link

fix(sec): upgrade org.json:json to 20180130 #724

Open Super-Sky opened 2 years ago

Super-Sky commented 2 years ago

What happened？

There are 1 security vulnerabilities found in org.json:json 20090211

What did I do？

Upgrade org.json:json from 20090211 to 20180130 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS

darrachequesne commented 2 years ago

Thanks for the pull request :+1:

I think the current version is the last version which is compatible with the one bundled on some old Android devices, so we'll have to drop support for Java 7 and bump the minimum Android version. Let's do this for the next major version :rocket:

Related: https://github.com/socketio/socket.io-client-java/issues/722

shivamsharma2710 commented 2 years ago

Related: #722

@darrachequesne When will be the Socket.io major release coming out? Any ETA please?