socket.io-client-java icon indicating copy to clipboard operation
socket.io-client-java copied to clipboard
verified publisher icon socketio

fix(sec): upgrade org.json:json to 20180130

Open Super-Sky opened this issue 3 years ago • 2 comments

What happened？

There are 1 security vulnerabilities found in org.json:json 20090211

What did I do？

Upgrade org.json:json from 20090211 to 20180130 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS

Super-Sky avatar Oct 13 '22 07:10 Super-Sky

Thanks for the pull request :+1:

I think the current version is the last version which is compatible with the one bundled on some old Android devices, so we'll have to drop support for Java 7 and bump the minimum Android version. Let's do this for the next major version :rocket:

Related: https://github.com/socketio/socket.io-client-java/issues/722

darrachequesne avatar Oct 13 '22 08:10 darrachequesne

Related: #722

@darrachequesne When will be the Socket.io major release coming out? Any ETA please?

shivamsharma2710 avatar Oct 26 '22 11:10 shivamsharma2710