Join GitHub today
GitHub is home to over 50 million developers working together to host and review code, manage projects, and build software together.
Sign upGitHub is where the world builds software
Millions of developers and companies build, ship, and maintain their software on GitHub — the largest and most advanced development platform in the world.
JFlex depends on unsafe ant@1.7.0 #294
Closed
Comments
regisd
added a commit
to regisd/jflex
that referenced
this issue
Aug 30, 2018
Fix issue jflex-de#294
regisd
added a commit
that referenced
this issue
Aug 31, 2018
* Update ant to 1.7.0 → 1.10.5 Fix Security vulenrability (DoS) #294
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
There is a dependency de.jflex:jflex@1.6.1 → org.apache.ant:ant@1.7.0
ant@1.7.0 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs.
https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEANT-30510