Commit 9873255
committed
fix: pin jsoup to 1.23.1 to resolve XSS vulnerability
jsoup 1.22.x is pulled in transitively via com.contentstack.sdk:utils
and is flagged by Snyk for a Cross-site Scripting (XSS) issue, fixed
in 1.23.1. Pin the version in dependencyManagement following the
existing pattern used for other contentstack-utils transitive deps.1 parent 8ddf872 commit 9873255
1 file changed
Lines changed: 6 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
220 | 220 | | |
221 | 221 | | |
222 | 222 | | |
| 223 | + | |
| 224 | + | |
| 225 | + | |
| 226 | + | |
| 227 | + | |
| 228 | + | |
223 | 229 | | |
224 | 230 | | |
225 | 231 | | |
| |||
0 commit comments