GitHub Vulnerabilities reports

[Henri Gomez]

Hi team

GitHub reports vulnerabilities on commons-io and httpcomponents

Any objections to fix them, by upgrading commons-io 2.7 and httpcomponents to 4.5.13 ?

Regads

jmxtrans / jmxtrans Known security vulnerabilities detected Dependency commons-io:commons-io Version < 2.7 Upgrade to ~> 2.7 Defined in pom.xml Vulnerabilities CVE-2021-29425 Moderate severity Dependency org.apache.httpcomponents:httpclient Version < 4.5.13 Upgrade to ~> 4.5.13 Defined in pom.xml Vulnerabilities CVE-2020-13956 Moderate severity

[Guillaume Lederrey]

Obviously no objections from me! But I'm too busy to take care of it myself :/

--
You received this message because you are subscribed to the Google Groups "jmxtrans" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jmxtrans+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jmxtrans/CALyUpY2w1W13T8tPLmj9XG1cPJ-Vwyttda8wY4prb4VXp2eVXw%40mail.gmail.com.

--

mobile : +41 76 573 32 40
skype : Guillaume.Lederrey
Freenode: gehel

projects :
* https://signs-web.herokuapp.com/