Skip to content

Updated dependencies

Choose a tag to compare

@arucard21 arucard21 released this 20 Dec 08:48
· 145 commits to master since this release

This release primarily updates the dependencies. It also ensures that v2.16 of log4j is used, though this framework was not vulnerable to log4shell. It uses log4j over slf4j which is known not to contain this vulnerability. However, the log4j-api dependency might still be used which may be marked as vulnerable by vulnerability scanners. So this release avoids those false positives.

Aside from this, a small improvement was made to the JSON fields servlet filter. It no longer tries to filter responses that are either empty or have a status code other than 200. This should ensure that the filter is only applied to actual JSON content.