Skip to content

Java-cf-env v3.1.2: solve known CVE

Compare
Choose a tag to compare
@anthonydahanne anthonydahanne released this 12 Oct 19:25
· 28 commits to main since this release

Get it while it's hot!

<dependency>
	<groupId>io.pivotal.cfenv</groupId>
	<artifactId>java-cfenv-boot</artifactId>
	<version>3.1.2</version>
</dependency>

What's Changed

This new release uses the latest json-io, version 4.14.1 , that solves a CVE found in 4.14.0 (see this issue: jdereg/json-io#174)

Big thanks to json-io maintainer, https://github.com/jdereg, for fixing this issue!

Enjoy!