Repository navigation
2 vulnerabilities found in dependency. #72
Description
My IDE says that deepl dependency have transitive dependencies with known vulnerabilities.
<dependency>
<groupId>com.deepl.api</groupId>
<artifactId>deepl-java</artifactId>
<version>1.10.2</version>
</dependency>
2 vulnerabilities found in dependency:
WS-2017-3734 5.3 Transitive Files or Directories Accessible to External Parties
CVE-2020-13956 5.3 Transitive Cross-Site Scripting (XSS)
Dependency maven:org.apache.httpcomponents:httpclient:4.5.2 is vulnerable.
Released Feb 21, 2016. Latest version is 4.5.14 has no known vulnerabilities.
Dependency maven:org.apache.commons:commons-lang3:3.16.0 is vulnerable.
Released Aug 07, 2024. Latest version is 3.18.0 has no known vulnerabilities.
Please, fix these asap.
Thanks.
Activity
daniel-jones-dev commentedon Aug 22, 2025
Hi @warm-tune, thanks for reporting and sorry for the delay. Looking into this now.
daniel-jones-dev commentedon Aug 22, 2025
This dependency is updated in v1.10.3.
warm-tune commentedon Aug 22, 2025
Cool, could you please tell when approx. it will be in maven central?
daniel-jones-dev commentedon Aug 22, 2025
Sorry, there was an issue in our publishing pipeline, thanks for pointing this out. It should be available on maven central now.