Skip to content

Upgrade to latest stable clojurescript release to address protobuf vulnerability #210

@kjothen

Description

@kjothen

Please refer to this vulnerability, "Upgrade com.google.protobuf:protobuf-java to version 3.4.0 or higher."

1.9.946

[org.clojure/clojurescript "1.9.946"]
   [com.google.javascript/closure-compiler-unshaded "v20170910"]
     ...
     [com.google.protobuf/protobuf-java "3.0.2"]

1.10.758

   [com.google.javascript/closure-compiler-unshaded "v20200315"]
      ...
      [com.google.protobuf/protobuf-java "3.11.1"]

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions