Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Update dependencies to patch CVEs (Dependabot) (#188)
* Update H2 Database to fix CWE-200, -312 (Password exposure) * Update Apache Commons IO to 2.7 to fix CWE-20, -22 (path traversal & improper input validation) * Update MySQL Connectors Java to 8.0.28 to fix CVE-2022-21363 (improper handling of insufficient permissions/privileges) * Update Jython to 2.7.2b3 to fix CVE-2013-2027 (improper access restrictions vulnerability) * Update MyBatis to fix CVE-2020-26945 (deserialization errors) * Update Apache Commons Compress to 1.21 to fix CVE-2021-35517 (improper handling of length parameter) * Update Apache Commons Email to fix CVE-2018-1294 (improper input validation) * Update Apache Commons FileUpload to fix CVE-2023-24998 (denial of service vulnerability)
- Loading branch information