danfickle / danfickle/openhtmltopdf
SVG support affected by CVE-2022-34169
Open
- Dominant language
- Java
- Stars
- 2.2k
- Forks
- 423
- PR merge metrics
- No merged PRs in 30d
Description
See: https://www.cve.org/CVERecord?id=CVE-2022-34169
Apache Xalan is pulled by `org.apache.xmlgraphics:batik-dom` which is pulled by `org.apache.xmlgraphics:batik-transcoder`.
Unfortunately looks like [Apache Xalan is being retired](https://github.com/advisories/GHSA-9339-86wc-4qgf), so there are no plans to create any future release to address this issue.
Is there any way to move away from this dependency?
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.