cloudstack icon indicating copy to clipboard operation
cloudstack copied to clipboard

cloudstack uses an org.json:json jar version that is not OSS friendly

Open pjfanning opened this issue 2 years ago • 0 comments

https://github.com/apache/cloudstack/blob/8f6721ed4c4e1b31081a951c62ffbe5331cf16d4/pom.xml#L162

Please use a version from 2023/2024. There are security fixes (CVEs).

The main issue is the license. It was only made properly public domain in late 2022. Prior to that, it had a nonsensical license - that restricted its use for evil. Please read https://www.apache.org/legal/resolved.html (section about JSON license).

pjfanning avatar Feb 23 '24 13:02 pjfanning