[ONGDB-300] Upgrade org.mozilla:rhino to 1.7.12 to fix high security vulnerability - GraphFoundation Jira

XML

Word

Printable

Details

Type: Story
Status: Done
Priority: Highest
Resolution: Done
Affects Version/s: None
Fix Version/s: 1.0.3
Component/s: None
Labels:
None

Description

Upgrade org.mozilla:rhino@1.7.9 to org.mozilla:rhino@1.7.12 to fix

XML External Entity (XXE) Injection [High Severity]
- https://snyk.io/vuln/SNYK-JAVA-ORGMOZILLA-1314295
- in org.mozilla:rhino@1.7.9
- introduced by org.mozilla:rhino@1.7.9

Attachments

Activity

People

Assignee:: Amanda Bouman

Reporter:: Brad Nussbaum

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 15/Jun/22 2:57 PM

Updated:: 17/Jun/22 3:07 PM

Resolved:: 17/Jun/22 3:07 PM