Skip to content

Update Dependencies to Fix Security Vulnerabilities#161

Open
cx-amol-mane wants to merge 1 commit intomasterfrom
security/fix-vulnerabilities-bdbd1e87
Open

Update Dependencies to Fix Security Vulnerabilities#161
cx-amol-mane wants to merge 1 commit intomasterfrom
security/fix-vulnerabilities-bdbd1e87

Conversation

@cx-amol-mane
Copy link
Copy Markdown
Contributor

This PR updates several dependencies to address security vulnerabilities:

Package Name Current Version Target Version
netty-codec-http 4.2.5.Final 4.2.8.Final
log4j-core 2.17.1 2.25.3
rhino 1.7.15 1.7.15.1

CVEs Fixed:

These updates are critical to mitigate known vulnerabilities and enhance the security of our project.


---
*This PR was automatically generated by Grype SCA Agent.*

Security updates to remediate identified vulnerabilities:

- netty-codec-http: 4.2.5.Final → 4.2.8.Final (fixes: GHSA-84h7-rjj3-6jx4)
- log4j-core: 2.17.1 → 2.25.3 (fixes: GHSA-vc5p-v9hr-52mj)
- rhino: 1.7.15 → 1.7.15.1 (fixes: GHSA-3w8q-xq97-5j7x)

Scanned by Grype SCA Agent
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant