Fix CVE-2014-4043
overheadhunter opened this issue Β· comments
Hi, @overheadhunter! Thank you for reporting, I'll try to take a look over the weekend, will merge an update and will publish a new version. It seems like something happened to the Windows CI setup even though there were no code changes.
Hey, @overheadhunter! I released a new version of jnr-fuse - 0.5.6
with the updated dependencies, thanks for reporting!
Please reopen, we need at least version 3.1.18
, but dependabot stopped with 3.1.10
. I added a warning in #135 but maybe it wasn't clear enough.
Wow, nevermind. Fixed in 3.1.8. My bad π