search

walmartlabs / lacinia

GraphQL implementation in pure Clojure
http://lacinia.readthedocs.io/en/latest/
Other
1.82k stars 163 forks source link

icu4j vulnerability #411

Closed elzibubble closed 2 years ago

elzibubble commented 2 years ago 
[com.walmartlabs/lacinia "1.1"]
  [clj-antlr "0.2.10"]
    [org.antlr/antlr4 "4.9.2"]
      [com.ibm.icu/icu4j "61.1"]

This version of icu4j has CVE-2020-21913 against it. Antlr 4.9.3 has merged an update: https://github.com/antlr/antlr4/pull/3261

clj-antlr 0.2.12 uses Antlr 4.9.3; please would you update?

hlship commented 2 years ago

Closed by #412