aceql-http
aceql-http copied to clipboard
Version uplift to resolve CVE-2024-52317
(to resolve CVE-2024-52317)
as seen here: https://mvnrepository.com/artifact/org.apache.tomcat.embed/tomcat-embed-core/9.0.95
<dependency>
<groupId>org.apache.tomcat.embed</groupId>
<artifactId>tomcat-embed-core</artifactId>
<version>9.0.98</version>
</dependency>
<dependency>
<groupId>org.apache.tomcat</groupId>
<artifactId>tomcat-jdbc</artifactId>
<version>9.0.98</version>
</dependency>
/* others below not related to CVE */
<groupId>org.apache.commons</groupId>
<artifactId>commons-lang3</artifactId>
<version>3.17.0</version>
<groupId>org.postgresql</groupId>
<artifactId>postgresql</artifactId>
<version>42.7.4</version>
Originally seen here: https://github.com/kawansoft/aceql-http/pull/38
This PR would replace /38
@ndepomereu thank you for your consideration and hopefully quick merge (and subsequent packaging/deployment)
This is 2 months old now.
I am trying to help with the upkeep.
But I cannot merge.