Skip to content

Update deps to fix CVEs.#1086

Open
tychobrailleur wants to merge 1 commit intoscribejava:masterfrom
tychobrailleur:fix/scribe-cves
Open

Update deps to fix CVEs.#1086
tychobrailleur wants to merge 1 commit intoscribejava:masterfrom
tychobrailleur:fix/scribe-cves

Conversation

@tychobrailleur
Copy link

There are other CVEs reported the rest of the codebase – in particular related to netty – but I want to make
sure the project is still active before spending more time on it. ;-)

- Update jackson-databind to 2.21.0 to address CVE-2025-52999
- Update mockwebserver to 4.12.0 to address CVE-2020-15250
@kullfar
Copy link
Member

kullfar commented Jan 21, 2026

Hi!
I hope to increase priority of this project in my life.
But (unfortunately) not now. Quite busy on other projects.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants