Skip to content
This repository has been archived by the owner on Feb 7, 2024. It is now read-only.

Feature/ae 1893 #920

Merged
merged 9 commits into from
Jun 30, 2023
Merged

Feature/ae 1893 #920

merged 9 commits into from
Jun 30, 2023

Commits on Jun 28, 2023

  1. AE-1893: Suppress a false positive jackson-databind vulnerability 

    - The whole issue itself is bogus, go read for fun FasterXML/jackson-databind#3972
    @Juholei
    Juholei committed Jun 28, 2023
    Configuration menu
    Copy the full SHA
    46c6d06 View commit details
    Browse the repository at this point in the history

  2. AE-1893: Update buddy dependencies and add buddy-core as direct depen… 

    …dency

- Removes vulnerable version of jackson-dataformat-cbor
    @Juholei
    Juholei committed Jun 28, 2023
    Configuration menu
    Copy the full SHA
    709706b View commit details
    Browse the repository at this point in the history

  3. AE-1893: Update ring-core 

    - Removes transient dependency to vulnerable version of commons-fileupload
    @Juholei
    Juholei committed Jun 28, 2023
    Configuration menu
    Copy the full SHA
    730e4f8 View commit details
    Browse the repository at this point in the history

  4. AE-1893: Update apache-poi 

    - Fixes multiple vulnerabilities
- New version of poi needed for some reason the explicit configuration of WorkBookFactory provider
- Configured to use XSSFWorkbookFactory so the workbooks are xlsx format as before
- Without this configured creation of xlsx file failed only in uberjar build
    @Juholei
    Juholei committed Jun 28, 2023
    Configuration menu
    Copy the full SHA
    fbebc14 View commit details
    Browse the repository at this point in the history

  5. AE-1893: Exclude batik dependencies from openhtmltopdf-svg-support an… 

    …d depend directly to newer versions

- Newer versions contain a bunch of fixes to known vulnerabilities
    @Juholei
    Juholei committed Jun 28, 2023
    Configuration menu
    Copy the full SHA
    d6ca7ab View commit details
    Browse the repository at this point in the history

  6. AE-1893: Update logback, fixes a vulnerability

    @Juholei
    Juholei committed Jun 28, 2023
    Configuration menu
    Copy the full SHA
    7157c41 View commit details
    Browse the repository at this point in the history

  7. AE-1893: Suppress a false positive vulnerability

    @Juholei
    Juholei committed Jun 28, 2023
    Configuration menu
    Copy the full SHA
    5dc4541 View commit details
    Browse the repository at this point in the history

  8. AE-1893: Update clj-http, fixes a vulnerability in transitive dependency

    @Juholei
    Juholei committed Jun 28, 2023
    Configuration menu
    Copy the full SHA
    d278e31 View commit details
    Browse the repository at this point in the history

Commits on Jun 29, 2023

  1. AE-1893: Suppress opensaml vulnerability, it was for opensaml c++ imp… 

    …lementation
    @Juholei
    Juholei committed Jun 29, 2023
    Configuration menu
    Copy the full SHA
    e0ec40a View commit details
    Browse the repository at this point in the history