Skip to content

Commit

Permalink
Protect against RCE vulnerability in Nippy
Browse files Browse the repository at this point in the history
"Nippy versions from v2.5.0-beta1 (24 Oct 2013) and before v2.15.0 final (24 Jul 2020) contain an RCE (Remote Code Execution) vulnerability that may allow an attacker to execute arbitrary code when thawing a malicious payload controlled by the attacker."

taoensso/nippy#130
  • Loading branch information
Frozenlock committed Aug 12, 2023
1 parent 68edc73 commit f1230f5
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion project.clj
Expand Up @@ -3,7 +3,7 @@
:url "https://github.com/dscarpetti/codax"
:license {:name "Eclipse Public License"
:url "http://www.eclipse.org/legal/epl-v10.html"}
:dependencies [[com.taoensso/nippy "2.14.0"]
:dependencies [[com.taoensso/nippy "3.2.0"]
[clj-time "0.13.0"]
[org.clojure/clojure "1.8.0"]
[org.clojure/core.cache "0.6.5"]]
Expand Down

0 comments on commit f1230f5

Please sign in to comment.