Update dependencies to fix vulnerabilities #3
Loading…
Reference in a new issue
No description provided.
Delete branch "feature/upgrade-dependencies"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
+-------------------+-------------------------------+
| dependency | status |
+-------------------+-------------------------------+
| batik-ext-1.9.jar | CVE-2018-8013 |
| pdfbox-2.0.8.jar | CVE-2018-11797, CVE-2018-8036 |
| xmpbox-2.0.8.jar | CVE-2018-11797, CVE-2018-8036 |
+-------------------+-------------------------------+
5 vulnerabilities detected. Severity: HIGH
Thank you! I'd been meaning to bump these (especially openhtmltopdf, bunch of nice fixes and such with the new version)... just kept forgetting about it.