New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade Kotlin SDK with gson>= 2.8.7 #1571

Open

Aryex opened this issue Mar 11, 2025 · 0 comments · May be fixed by #1572

Labels

kotlin p3

Aryex commented Mar 11, 2025

The Kotlin SDK uses gson 2.8.7, which has been identified to have CVE-2022-25647. We should upgrade gson preferably to >= 2.8.9.

github-actions bot added p3 need triage labels

Aryex changed the title ~~Upgrade Kotlin SDK to gson to >= 2.8.7~~ Upgrade Kotlin SDK with gson>= 2.8.7

drstrangelooker added kotlin and removed need triage labels

Aryex linked a pull request

that will close this issue

fix: upgraded kts sdk gson to 2.12.1 to fix CVE-2022-25647 #1572

Draft

3 tasks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment