danfickle/openhtmltopdf

Upgrade to batik 1.10 to fix security vulnerabilities

Closed this issue · 2 comments

chubbard commented

openhtmltopdf is using batik as a 3rd party libarary version 1.9, but it has a high security vulnerability. Please consider updating it to 1.10 so openhtmltopdf can pass security scanners more easily.

batik:1.9 -> upgrade to batik:1.10 for https://nvd.nist.gov/vuln/detail/CVE-2018-8013

danfickle commented

RC17 just released with update to Batik. Thanks @chubbard.

chubbard commented

Thank you for turning that around so quickly!