This repository was archived by the owner on Dec 4, 2023. It is now read-only.
This repository was archived by the owner on Dec 4, 2023. It is now read-only.
msal4j library dependency vulnerability #1376
Description
Version
4.14
Describe the bug
bot.connector uses msal4j 1.8.1 library which has a dependency on net.minidev:json-smart that has a known vulnerability.
To Reproduce
Run vulnerability report on 4.14 SDK.
Expected behavior
No vulnerabilities should be found.