[
https://issues.apache.org/jira/browse/CALCITE-7098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18014531#comment-18014531
]
Zhen Chen commented on CALCITE-7098:
------------------------------------
Fixed in
https://github.com/apache/calcite/commit/3ceb364c158e80c59a89137c85637ad53f4c0fab
Thanks for contribution [~zrlpar]
Thanks for review [~cancai]
> Update json-smart from 2.3 to 2.6.0
> -----------------------------------
>
> Key: CALCITE-7098
> URL: https://issues.apache.org/jira/browse/CALCITE-7098
> Project: Calcite
> Issue Type: Improvement
> Reporter: Niels Pardon
> Assignee: Niels Pardon
> Priority: Major
> Labels: pull-request-available
>
> Calcite currently depends on json-smart 2.3 which has multiple direct and
> indirect vulnerabilities. Upgrading to the latest 2.5.2 fixes those
> vulnerabilities.
> - json-smart is a dependency in the calcite BOM
> - json-smart is brought in by the unfixed dependency
> com.jayway.jsonpath:json-path:2.9.0
> https://github.com/json-path/JsonPath/pull/1030
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
