Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix CVE-2023-1370 in kogito-runtimes (json-smart upgrade) #313

Closed
baldimir opened this issue Jun 5, 2023 · 1 comment · Fixed by apache/incubator-kie-kogito-runtimes#3038
Closed

Fix CVE-2023-1370 in kogito-runtimes (json-smart upgrade) #313

baldimir opened this issue Jun 5, 2023 · 1 comment · Fixed by apache/incubator-kie-kogito-runtimes#3038
Assignees
@baldimir
Labels
area:cicd Related to pipelines, automation. Community GitHub Actions or internal area:dependencies Dependency upgrade/update/migration type:bug Something is behaving unexpectedly

Comments

@baldimir
Copy link

baldimir commented Jun 5, 2023

Old version of json-smart is used in kogito-runtimes, it is brought in kogito-quarkus-common transitively with json-path version 2.6.0.

Acceptance criteria:

  • json-smart version 2.4.10 is used in kogito-runtimes.
  • json-path version is updated to 2.8.0.
@baldimir baldimir converted this from a draft issue Jun 5, 2023
@baldimir baldimir added the area:cicd Related to pipelines, automation. Community GitHub Actions or internal label Jun 5, 2023
@baldimir baldimir self-assigned this Jun 5, 2023
@baldimir baldimir added type:bug Something is behaving unexpectedly area:dependencies Dependency upgrade/update/migration labels Jun 5, 2023
@baldimir baldimir mentioned this issue Jun 5, 2023
Merged
@baldimir baldimir moved this from In Progress 🔧 (1 per person) to In Review 🔁 (1 per person) in IBM and KIE Community Project - Archived! Jun 6, 2023
@baldimir
Copy link
Author

baldimir commented Jun 7, 2023

PR merged. Closing this.

@baldimir baldimir closed this as completed Jun 7, 2023
@github-project-automation github-project-automation bot moved this from In Review 🔁 (1 per person) to Done 🎉 in IBM and KIE Community Project - Archived! Jun 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@baldimir baldimir

Labels
area:cicd Related to pipelines, automation. Community GitHub Actions or internal area:dependencies Dependency upgrade/update/migration type:bug Something is behaving unexpectedly
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

[kie-issues#313] CVE-2023-1370 Upgrade json-smart and json-path. baldimir/kogito-runtimes
1 participant
@baldimir