Skip to content

Commit

Permalink
Merge pull request #325 from FabioPinheiro/update/tink-1.16.0
Browse files Browse the repository at this point in the history
Update tink to 1.16.0
  • Loading branch information
FabioPinheiro authored Jan 4, 2025
2 parents b4f96d8 + 5ea2033 commit 31b639d
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion build.sbt
Original file line number Diff line number Diff line change
Expand Up @@ -442,7 +442,7 @@ lazy val didImp = crossProject(JSPlatform, JVMPlatform)
libraryDependencies += D.nimbusJoseJwt.value,

// BUT have vulnerabilities in the dependencies: CVE-2023-2976
libraryDependencies += "com.google.crypto.tink" % "tink" % "1.15.0", // https://mvnrepository.com/artifact/com.google.crypto.tink/tink/1.10.0
libraryDependencies += "com.google.crypto.tink" % "tink" % "1.16.0", // https://mvnrepository.com/artifact/com.google.crypto.tink/tink/1.10.0
// To fix vulnerabilitie https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2976
libraryDependencies += "com.google.protobuf" % "protobuf-java" % "4.29.2",
)
Expand Down

0 comments on commit 31b639d

Please sign in to comment.