cybersource-sdk-java

cybersource-sdk-java copied to clipboard

Hello Community, we are upgrading to the new Java SDK using the RunSample.java and our own projects, I have consistent reproduce the following behaviors, please advise. P12 keys created using...

huw-trimet

Hi, I have noticed that previous versions of the Cybersource SDK for Java are available as `cybersource-sdk-java-{version}.zip`. I was looking for `cybersource-sdk-java-6.2.14.zip` but couldn't find it. Will this version be...

tessaCH

gaubansa

Bumps org.apache.santuario:xmlsec from 2.3.0 to 2.3.4. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

We want to add flexibility for "runTransaction" method.

3

Hi, We have a scenario wherein we cannot keep keys on the Hard Disk but on the cloud and we want ability to send custom Merchant Config object to the...

amitshukla30

Add the abilty to set a connection timeout separate from socket timeout

1

This allows the connection timeout to be configured differently from the socket timeout. Getting a connection should be relatively quick and you don't want to tie that to the same...

jaiew

We are currently working on a refactoring of our old project which uses the simple order api, can we use the existing certificates for the rest api sdk. If not,...

woshigaki

Cybersource imports xalan-2.7.2.jar, which has a vulnerability noted in CVE-2022-34169 https://nvd.nist.gov/vuln/detail/CVE-2022-34169 The issue is fixed in xalan-2.7.3. Would like to see if cybersource could be updated accordingly

bmiller-0

Arbitrary code execution vulnerability

1

Received this vulnerability report via Snyk: https://security.snyk.io/vuln/SNYK-JAVA-XALAN-2953385 Cybersource imports Xalan, all versions of Xalan are affected. Would be helpful to confirm that Cybersource SDK is not affected by this vulnerability...

kennyfundrise

We really do not want to be putting the p12 file out on the filesystem. There ought to be another way to provide the p12 file as a byteArray, InputStream,...

nfdavenport