intuit / intuit/QuickBooks-V3-Java-SDK

Dependency commons-configuration vulnerabilities

Open
#222 2 comments 2 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
88
Forks
158
No merged PRs in 30d

Description

Despite #201 being closed, https://mvnrepository.com/artifact/com.intuit.quickbooks-online/ipp-v3-java-devkit/6.4.1 depends upon `commons-configuration` 1.x:
![image](https://github.com/user-attachments/assets/968823af-f3c5-4d3b-8394-a2e46c8c8b32)

https://mvnrepository.com/artifact/commons-configuration/commons-configuration/1.10 indicates that "org.apache.commons » commons-configuration2"
![image](https://github.com/user-attachments/assets/19739942-beec-4cdc-a8b5-26f8854270a5)
![image](https://github.com/user-attachments/assets/c97c5c03-ba66-4d91-bb61-f186295e70ae)

`commons-configuration` 1.x also breaks my IDE, since my build stack requires `commons-beanutils` version 1.9.4 however `commons-configuration` requires `commons-beanutils` version 1.8.0.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.