intuit / intuit/QuickBooks-V3-Java-SDK
Bump gson to latest 2.11.0 due to vulnerability in 2.8.1
Open
- Dominant language
- Java
- Stars
- 88
- Forks
- 158
- PR merge metrics
- No merged PRs in 30d
Description
The gson version 2.8.1 has some vulnerabilities
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25647
and
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15250
and it's recommended to update to the latest 2.11.0
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.