Commit 1f03942
authored
dependency: upgrade assertj-core to 3.27.7 to fix XXE vulnerability (CVE-2025-NDJSON) (#969)
Fixes #101 (Dependabot security alert)
assertj-core <= 3.27.6 is vulnerable to XML External Entity (XXE) injection
when parsing XML assertions. Upgrade to 3.27.7 which disables external entity
processing by default.
All 412 unit tests pass with the new version.1 parent c36bd52 commit 1f03942
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
111 | 111 | | |
112 | 112 | | |
113 | 113 | | |
114 | | - | |
| 114 | + | |
115 | 115 | | |
116 | 116 | | |
117 | 117 | | |
| |||
0 commit comments