New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Upgrade to com.thoughtworks.xstream:xstream@1.4.9. #3

Open

wvdhaute opened this issue Nov 19, 2018 · 0 comments

Member

wvdhaute commented Nov 19, 2018

xstream@1.3.1 has multiple vulnerabilities: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3674 - https://app.snyk.io/vuln/SNYK-JAVA-COMTHOUGHTWORKSXSTREAM-30385

Upgrade to 1.4.9

# for free to join this conversation on GitHub. Already have an account? # to comment