KafkaExample
KafkaExample copied to clipboard
habren
Hi, in **KafkaExample-master/demokafka.0.10.1.0**, there are mulptiple versions of library **org.xerial.snappy:snappy-java**. However, according to Maven's dependency management strategy: **_"first declaration wins"_**, only **org.xerial.snappy:snappy-java:1.1.1.6** can be loaded, and **org.xerial.snappy:snappy-java:1.1.2.6** will be shadowed....
[](https://infosecwriteups.com/want-to-take-over-the-java-ecosystem-all-you-need-is-a-mitm-1fc329d898fb) --- This is a security fix for a high severity vulnerability in your [Apache Maven](https://maven.apache.org/) `pom.xml` file(s). The build files indicate that this project is resolving dependencies over HTTP...
This PR was automatically created by Safer, an open-source tool that updates vulnerable dependencies with compatible and more secure versions. Analyzed commit: c774b075771b5f7788ca14eddb3f44d73726e472 File updated: pom.xml Vulnerabilities reduced: 230 ->...
Hi there 👋, I'm [Safer Bot](https://gitlab.com/lsi-ufcg/vulnerabilidades/safer)! Safer is an open-source tool that automatically updates vulnerable dependencies to more secure and compatible versions. Our goal is to help maintainers keep their...