Closes #288

It took me a while to finish this CVE convern. I gave a lot of time for upstream to address the underlying issue.
binkley · Oct 22, 2023 · 9528056 · 9528056
1 parent 6b38fad
commit 9528056
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 10 deletions.
diff --git a/gradle.properties b/gradle.properties
@@ -2,8 +2,6 @@
 org.gradle.jvmargs=--add-opens java.base/java.lang=ALL-UNNAMED
 # Versions
 assertJVersion=3.24.2
-# TODO: Update spotbugs for CVE-2022-42920
-bcelVersion=6.7.0
 checkstyleVersion=10.12.4
 dependencyCheckPluginVersion=8.4.2
 findbugsAnnotationsVersion=3.0.1

diff --git a/pom.xml b/pom.xml
@@ -56,8 +56,6 @@
     <properties>
         <!-- @formatter:off -->
         <assertj.version>3.24.2</assertj.version>
-        <!-- TODO: Update spotbugs for CVE-2022-42920 -->
-        <bcel.version>6.7.0</bcel.version>
         <buildplan-maven-plugin.version>1.5</buildplan-maven-plugin.version>
         <checkstyle.version>10.12.4</checkstyle.version>
         <dependency-check-maven.version>8.4.2</dependency-check-maven.version>
@@ -370,12 +368,6 @@
                     </plugins>
                 </configuration>
                 <dependencies>
-                    <dependency>
-                        <groupId>org.apache.bcel</groupId>
-                        <artifactId>bcel</artifactId>
-                        <!-- TODO: Update spotbugs for CVE-2022-42920 -->
-                        <version>${bcel.version}</version>
-                    </dependency>
                     <dependency>
                         <groupId>com.github.spotbugs</groupId>
                         <artifactId>spotbugs</artifactId>