Skip to content

please release new version with safe dependencies #200

@teicher

Description

@teicher

Hello,
the current GA 5.1.1 pulls in org.asynchttpclient:async-http-client:2.10.4
which in turn pulls in a whole truckload of CVEs in nearly all io.netty components.
build.gradle on master has already been updated to 2.12.3 so this should be built as a new version and made available on mvncentral.
Many Thanks!

(CVE scanner: https://jeremylong.github.io/DependencyCheck/dependency-check-maven/ )

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions