Skip to content

Conversation

binokkio
Copy link

Addresses #870 .

@joseph-neeraj
Copy link

hitting this now, can we get this merged ?

joseph-neeraj added a commit to Mastercard/client-encryption-java that referenced this pull request Apr 12, 2024
Updates the org.json.json and com.jayway.jsonpath.json-path libraries which fix CVE-2023-51074 and CVE-2023-5072.

Had to make code changes because the json-path library introduced a bug in the updated version which fails a few unit tests in our repo.
See this PR to track the issue json-path/JsonPath#871
@binokkio binokkio force-pushed the fix/delete-missing-path branch from eaa5e9b to 31b4484 Compare November 30, 2024 07:31
@binokkio
Copy link
Author

I checked the current json-path:master and the issue is still there. I've rebased this PR on json-path:master and updated the unit test to align with the switch to junit-jupiter, hoping this will get merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants