Skip to content

Commit

Permalink
CIRCSTORE-520: Upgrade Vertx from 4.5.5 to 4.5.9 fixing Snappy vulns
Browse files Browse the repository at this point in the history
https://folio-org.atlassian.net/browse/CIRCSTORE-520

Upgrade Vert.x from 4.5.5 to 4.5.9.

This indirectly upgrades snappy-java from 1.1.10.0 to 1.1.10.5 fixing these vulnerablities:

* https://nvd.nist.gov/vuln/detail/CVE-2023-43642  Allocation of Resources Without Limits or Throttling
* https://nvd.nist.gov/vuln/detail/CVE-2023-34455  Denial of Service (DoS)
* https://nvd.nist.gov/vuln/detail/CVE-2023-34453  Integer Overflow or Wraparound
* https://nvd.nist.gov/vuln/detail/CVE-2023-34454  Integer Overflow or Wraparound
  • Loading branch information
julianladisch committed Aug 5, 2024
1 parent 117f2c3 commit ed629f9
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
<ramlfiles_path>${basedir}/ramls</ramlfiles_path>
<vertx-version>4.5.5</vertx-version>
<vertx-version>4.5.9</vertx-version>
<raml-module-builder-version>35.2.0</raml-module-builder-version>
<spring.version>6.1.5</spring.version>
<argLine />
Expand Down

0 comments on commit ed629f9

Please sign in to comment.