Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Require json-path 2.9.0 to fix CVE-2023-51074. Resolves #3919 #4132

Merged
merged 1 commit into from
Feb 15, 2024

Conversation

dlvenable
Copy link
Member

Description

Require json-path 2.9.0 to fix CVE-2023-51074.

Issues Resolved

Resolves #3919

Check List

  • New functionality includes testing.
  • New functionality has a documentation issue. Please link to it in this PR.
    • New functionality has javadoc added
  • Commits are signed with a real name per the DCO

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

@dlvenable dlvenable merged commit 838744c into opensearch-project:main Feb 15, 2024
74 of 76 checks passed
opensearch-trigger-bot bot pushed a commit that referenced this pull request Feb 15, 2024
Signed-off-by: David Venable <[email protected]>
(cherry picked from commit 838744c)
@dlvenable dlvenable deleted the 3919-json-path branch February 15, 2024 17:09
dlvenable added a commit that referenced this pull request Feb 16, 2024
#4133)

Signed-off-by: David Venable <[email protected]>
(cherry picked from commit 838744c)

Co-authored-by: David Venable <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

CVE-2023-51074 (Medium) detected in json-path-2.8.0.jar
3 participants