aliyun/aliyun-oss-java-sdk

CVE-2023-1436 from jettison 1.5.2/1.5.3

emmansun opened this issue · 2 comments

emmansun commented

请升级依赖包jettison 到1.5.4。
image

billschen commented

还有依赖httpClient也要升级！
CVE-2020-13956 5.3 Improper Input Validation vulnerability with Medium severity found

jqncc commented

org.codehaus.jettison这啥包?怎么还有人用? 用你们自己的fastjson或者jackson不香吗? 搞得一个项目好几个json库