swagger-api / swagger-api/swagger-codegen
swagger-codegen should update Apache Commons BeanUtils to 1.9.4
Nobody has claimed this yet.
- Dominant language
- Mustache
- Stars
- 17.8k
- Forks
- 6k
- PR merge metrics
- No merged PRs in 30d
Description
Apache Commons BeanUtils introduced a fix for BDSA-2014-0001 (CVE-2014-0114), however did not enable the protections by default. A remote attacker could leverage this to cause code execution in applications that did not use the new security feature.
Please update to 1.9.4
For more info: http://commons.apache.org/proper/commons-beanutils/
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the dependency declaration for Apache Commons BeanUtils and confirm where its version is controlled. Update it to 1.9.4, then verify that generated artifacts resolve the requested version and that the relevant build checks pass; no file or test is named in the issue.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 45/100