docjure
docjure copied to clipboard
Upgrade Apache POI to mitigate CVE-2025-31672
Apache POI has a known vulnerability at the current version which can be resolved by upgrading to > 5.4.1
lein nvd also reports the vulnerability, and I was able to successfully execute tests with the all profile.
CVE Finding: https://www.cve.org/CVERecord?id=CVE-2025-31672 Snyk Report: https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHEPOI-9685010 Related Issue: https://github.com/mjul/docjure/issues/118
Please let me know if there's anything else you need!