Skip to content
This repository has been archived by the owner on Sep 3, 2024. It is now read-only.

Commit

Permalink
Update build.gradle to fix vulnerable sub-dependencies
Browse files Browse the repository at this point in the history
Specifically: CVE-2022-42003, CVE-2021-46877, CVE-2022-42004, and CVE-2020-36518, all caused by com.fasterxml.jackson.core:jackson-databind version 2.13.0.

These vulnerabilities don't affect end users of the mod. Only developers were potentially affected. Then again, the attack vectors for these CVEs aren't super relevant when compiling Minecraft mods. So, do update your forks, but don't worry too much.
  • Loading branch information
Alexander01998 authored Apr 17, 2024
1 parent b891245 commit eccf3fe
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion build.gradle
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
buildscript {
dependencies {
classpath 'org.kohsuke:github-api:1.135'
classpath 'org.kohsuke:github-api:1.321'
}
}

Expand Down

0 comments on commit eccf3fe

Please sign in to comment.