You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Whenever a new release is made of WireMock, that new version should be set in this plugin and this plugin should be released
Or, the version of WireMock in this plugin should be configurable, or even not set at all.
Current situation, with latest version of this plugin, is that user code fails in Snyk:
Upgrade org.wiremock:[email protected] to org.wiremock:[email protected] to fix
✗ Denial of Service (DoS) (new) [High Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGECLIPSEJETTY-8[18](https://github.com/wiremock/wiremock-spring-boot/actions/runs/11649861535/job/32437887124#step:4:19)6142] in org.eclipse.jetty:[email protected]
introduced by org.wiremock:[email protected] > org.eclipse.jetty:[email protected] and 3 other path(s)
Proposal
I think that:
Current situation, with latest version of this plugin, is that user code fails in Snyk:
References
Now I do it like this in the user code:
https://github.com/wiremock/wiremock-spring-boot/blob/dd1186e495451aac468556fe37963d3f973ea323/build.gradle#L25
The text was updated successfully, but these errors were encountered: