hyperledger-web3j/web3j

CVE-2023-33201 transitive vulnerable dependency

Closed this issue · 1 comments

Checkmarx warns that this library has transitive dependency with security issue

This vulnerability exists in org.bouncycastle:bcprov-jdk18on version 1.73
https://devhub.checkmarx.com/cve-details/CVE-2023-33201/

I've noticed that bcprov-jdk18on library already has newer versions without that vulnerability, so updating library should solve this issue.
https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk18on

Fixed, closing issue