tabulapdf/tabula-java

Gson vulnerability in tabula-1.0.5 release

gsonOutdated opened this issue · 2 comments

gsonOutdated commented

While gson version was updated to 2.0.9 to fix the following issue:
GHSA-4jrv-ppp4-jm57
through ab93da9
the latest release
https://github.com/tabulapdf/tabula-java/releases/tag/v1.0.5
still has the vulnerable version.

Would it be ok asking for a new release of tabula-java?

muhammad-asn commented

Any update on this?

  • 👀3
dfcan commented

+1, this is affecting me too

  • 👀1