Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update telemetry SDK to address CVE-2022-25647 with GSON library #93

Closed
jasonjkeller opened this issue May 27, 2022 · 0 comments · Fixed by #94
Closed

Update telemetry SDK to address CVE-2022-25647 with GSON library #93

jasonjkeller opened this issue May 27, 2022 · 0 comments · Fixed by #94
Assignees
@jasonjkeller

Comments

@jasonjkeller
Copy link
Contributor

jasonjkeller commented May 27, 2022 •
edited
Loading

com.google.code.gson 2.8.6 is affected by CVE-2022-25647. It is included in telemetry-core (shaded). This project needs to be updated to use the latest telemetry SDK 0.13.2 to address the issue.

image
@jasonjkeller jasonjkeller changed the title Update telemetry SDK Update telemetry SDK to address CVE-2022-25647 with GSON library May 27, 2022
@jasonjkeller jasonjkeller mentioned this issue May 31, 2022
Merged
@jasonjkeller jasonjkeller self-assigned this May 31, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jasonjkeller jasonjkeller

Labels
None yet
Projects
Java Engineering Board
Archived in project
Milestone
No milestone
1 participant
@jasonjkeller