New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

thymeleaf 2.1.5 import ognl 3.0.8 which is vulnerable to DOS attacks #57

Closed

kadary opened this issue May 17, 2019 · 1 comment

kadary commented May 17, 2019

OGNL (3.0.8) includes in ogham 2.0.0 is vulnerable to DOS attack: https://app.snyk.io/vuln/SNYK-JAVA-OGNL-30474

kadary changed the title ~~ognl is vulnerable to DOS attacks~~ thymeleaf 2.1.5 import ognl 3.0.8 which is vulnerable to DOS attacks

kadary added a commit to demkada/ogham that referenced this issue


          Fix for groupe-sii#57: Update ogn version 3.0.21

36118d5

Author

kadary commented May 17, 2019

Fix by 36118d5

kadary closed this as completed

kadary mentioned this issue

Upgrade some vulnerable dependencies #59

Closed

kadary mentioned this issue

Upgrade some vulnerable dependencies #73

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment