google / data-transfer-project

The Data Transfer Project makes it easy for people to transfer their data between online service providers. We are establishing a common framework, including data models and protocols, to enable direct transfer of data both into and out of participating online service providers.

http://datatransferproject.dev

There is a vulnerability in Jena 3.9.0,upgrade recommended

QiAnXinCodeSafe opened this issue 2 years ago · comments

奇安信CodeSafe commented 2 years ago

data-transfer-project/extensions/data-transfer/portability-data-transfer-solid/build.gradle

Line 40 in ef53a7e

compile group: 'org.apache.jena', name: 'jena-core', version: '3.9.0'

CVE-2022-28890 CVE-2021-39239 CVE-2021-33192

Recommended upgrade version：4.2.0