Skip to content

Commit d16b90f

Browse files
build(deps): bump org.mozilla:rhino from 1.7.14.1 to 1.8.1
Bumps [org.mozilla:rhino](https://github.com/mozilla/rhino) from 1.7.14.1 to 1.8.1. - [Release notes](https://github.com/mozilla/rhino/releases) - [Changelog](https://github.com/mozilla/rhino/blob/master/RELEASE-NOTES.md) - [Commits](https://github.com/mozilla/rhino/commits) --- updated-dependencies: - dependency-name: org.mozilla:rhino dependency-version: 1.8.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
1 parent ebf59a5 commit d16b90f

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

openapi-validation-core/build.gradle

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,8 +10,8 @@ dependencies {
1010
implementation(libs.commons.codec) {
1111
because 'Apache commons-codec before 1.13 is vulnerable to information exposure. See https://devhub.checkmarx.com/cve-details/Cxeb68d52e-5509/'
1212
}
13-
implementation('org.mozilla:rhino:1.7.14.1') {
14-
because 'CVE-2025-66453: Rhino before 1.7.14.1 has high CPU usage and potential DoS when passing specific numbers to toFixed() function. See https://github.com/mozilla/rhino/security/advisories/GHSA-3w8q-xq97-5j7x'
13+
implementation('org.mozilla:rhino:1.8.1') {
14+
because 'CVE-2025-66453: Rhino before 1.8.1 has high CPU usage and potential DoS when passing specific numbers to toFixed() function. See https://github.com/mozilla/rhino/security/advisories/GHSA-3w8q-xq97-5j7x'
1515
}
1616
// implementation('org.yaml:snakeyaml:1.33') {
1717
// because 'Vulnerability in 1.33 is not yet fixed. See: https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in' +

0 commit comments

Comments
 (0)