CVE-2020-8908 on swagger-compat-spec-parser, json-schema-validator replacement?

swagger-api / swagger-parser

Swagger Spec to Java POJOs

http://swagger.io

Apache License 2.0

782 stars 528 forks source link

Open Deiv70 opened 1 year ago

Deiv70 commented 1 year ago

The last json-schema-validator release is from 2020 ( looks like it's no longer maintained :thinking: ).

CVE-2020-8908 vulnerability is now present on the project's Google/Guava dependency (28.2-android). :dart:

IMHO, It would be a good thing to replace it. :star: :smiley: