google / google/closure-compiler
Usage of vulnerable dependency: protobuf
Open
- Dominant language
- JavaScript
- Stars
- 7.7k
- Forks
- 1.2k
- Avg merge
- 2d 12h
- Merged PRs (30d)
- 6
Description
The dependency for protobuf (com.google.protobuf's artifact protobuf-java) has a reported vulnerability as described in https://nvd.nist.gov/vuln/detail/CVE-2015-5237. Updating to a version where this has been patched (3.4.0 onwards apparently, current dependency is for 3.0.2) would be highly advisable.
Contributor guide
Assessment
This issue has not been assessed yet.