Comments (4)
mihai-vladuc
commented on September 24, 2024
The following dependencies in the pom.xml will be updated to remediate critical and high CVEs :
- io:undertow:undertow-core:2.2.28.Final to undertow-core io.undertow Version 2.2.32.Final
- org.bitbucket.b_c:jose4j:0.9.3 to org.bitbucket.b_c:jose4j:0.9.4
from light-4j.
stevehu
commented on September 24, 2024
@mihai-vladuc I have a light-bot to update all 1.6.x repos together. I will run that today. Thanks.
from light-4j.
mihai-vladuc
commented on September 24, 2024
@stevehu please be advised the scope of the issue was changed, only "undertow" and bitbucket" needs to be upgraded.
from light-4j.
stevehu
commented on September 24, 2024
This is done and I have released a new snapshot version for your testing. Thanks.
from light-4j.
Related Issues (20)
- implement an admin endpoint to explore the cache manager
- light-4j 1.6.x : Updating dependencies in light-4j with CVEs to: jose4j 0.9.6 HOT 2
- SidecarPathPrefixServiceHandler never calls put attachment
- return 413 response code if request body is too big
- upgrade json-schema-validator to 1.4.3 HOT 1
- remove dependency of json-schema-validator
- add open-telemetry for tracing, metrics and logging
- Add another JwtVerifier implementation that does not verify scopes HOT 1
- upgrade http-client to 1.0.12
- move MapUtil to light-4j utility module
- Fix a typo in OpenApiHandler HOT 1
- rollback the jwt issuer and verifier with local jks files
- update dependences for some modules that depending on http-client
- change the jwk cache object to single JsonWebKey
- The parameter name is missing after upgrade json-schema-validator HOT 1
- -Dlight-4j-config-password is not working for AutoAESSaltDecryptor
- Add a method to check if the jwt token has scopes in JwtVerifier
- only the use=sig jwk will return from the retrieveJwk
- retrieve jwk will work with or without use sig in the response
- Need to filter the jwks with use=sig for getJsonWebKeyMap
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from light-4j.