LamGC/ScalaBot
1
0
Fork 0
mirror of https://github.com/LamGC/ScalaBot.git synced 2025-04-29 22:27:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(dependencies): 更新 Commons-codec 依赖项的版本.

Browse Source 
由于目前从 TelegramBots-Abilities 引入的 Commons-codec 存在 Base 32 和 64 的编解码漏洞,
考虑到需要防范潜在的安全问题, 因此决定更新 Commons-codec
的版本号.
----------------
参考链接：
https://devhub.checkmarx.com/cve-details/Cxeb68d52e-5509/
This commit is contained in:
LamGC 2022-09-19 14:32:40 +08:00
parent dfab6b14bd
commit 9c32d26c0d
Signed by: LamGC
GPG Key ID: 6C5AE2A913941E1D
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
scalabot-extension/build.gradle.kts
View File

@ -8,6 +8,7 @@ plugins {
} }
dependencies { dependencies {
implementation("commons-codec:commons-codec:1.15")
api("org.telegram:telegrambots-abilities:6.1.0") api("org.telegram:telegrambots-abilities:6.1.0")
api("org.slf4j:slf4j-api:2.0.0") api("org.slf4j:slf4j-api:2.0.0")