[ https://issues.apache.org/jira/browse/TINKERPOP-1068?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15197236#comment-15197236 ]
stephen mallette commented on TINKERPOP-1068: --------------------------------------------- I bumped this by using the jitpack version: https://jitpack.io/#jeremyh/jBCrypt/jbcrypt-0.4 That was an easy way to deal with it but not a great way. Might yet consider doing a 3rd party submission of the artifact to sonatype: http://central.sonatype.org/pages/choosing-your-coordinates.html > Bump to support jbcrypt-0.4m.jar > -------------------------------- > > Key: TINKERPOP-1068 > URL: https://issues.apache.org/jira/browse/TINKERPOP-1068 > Project: TinkerPop > Issue Type: Improvement > Components: build-release > Affects Versions: 3.1.0-incubating > Reporter: Marko A. Rodriguez > Fix For: 3.1.2-incubating > > > Sven says there is a security issue in {{jbcrypt-0.3m.jar}}, where {{0.4}} > solves it. I am told that 0.4 is not out yet in Central Repo so we will have > to wait. However, a quick Google search revealed: > http://mvnrepository.com/artifact/de.svenkubiak/jBCrypt/0.4 > Different {{groupId}}/etc. but same "mindrot" development group. ?? -- This message was sent by Atlassian JIRA (v6.3.4#6332)