Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Version bump request to address vulnerability #9

Open
sheyns-atreides opened this issue Oct 22, 2024 · 1 comment
Open

Version bump request to address vulnerability #9

sheyns-atreides opened this issue Oct 22, 2024 · 1 comment

Comments

@sheyns-atreides
Copy link

The geotools library has a remote code execution for version 28.2, causing this package to fail an audit check.

Can you bump up to geotools to 29.6 to address this?

@jiayuasu
Copy link
Owner

I've been aware of the CVE issue of geotools 28.2. Unfortunately, 28.2 is the last Java 8 release of Geotools. Sedona will migrate to Java 11 soon together with GeoTools 30.0 upgrade. However, we are still waiting for major Spark hosting services to upgrade to Java 11.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants