[
https://issues.apache.org/jira/browse/CALCITE-7098?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Zhen Chen resolved CALCITE-7098.
--------------------------------
Fix Version/s: 1.41.0
Resolution: Fixed
> Update json-smart from 2.3 to 2.6.0
> -----------------------------------
>
> Key: CALCITE-7098
> URL: https://issues.apache.org/jira/browse/CALCITE-7098
> Project: Calcite
> Issue Type: Improvement
> Reporter: Niels Pardon
> Assignee: Niels Pardon
> Priority: Major
> Labels: pull-request-available
> Fix For: 1.41.0
>
>
> Calcite currently depends on json-smart 2.3 which has multiple direct and
> indirect vulnerabilities. Upgrading to the latest 2.5.2 fixes those
> vulnerabilities.
> - json-smart is a dependency in the calcite BOM
> - json-smart is brought in by the unfixed dependency
> com.jayway.jsonpath:json-path:2.9.0
> https://github.com/json-path/JsonPath/pull/1030
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
