soap icon indicating copy to clipboard operation
soap copied to clipboard

Support sweet_xml 0.7

Open 23Skidoo opened this issue 3 years ago • 2 comments

sweet_xml 0.7 was released in July 2021. There are already some libraries like ex_aws that specify sweet_xml ~> 0.7 in their dependencies, which results in an error when ex_aws and soap are used together.

23Skidoo avatar Jan 13 '22 10:01 23Skidoo

This is an important change that needs to be done. There is a high vulnerability security flaw with older versions of sweet_xml. https://security.snyk.io/vuln/SNYK-HEX-SWEETXML-1088046. Even though SNYK says no fixed, it has been fixed with sweet_xml 7, see https://github.com/kbrw/sweet_xml/issues/71

eckmanca-caremore avatar May 06 '22 18:05 eckmanca-caremore

FYI. Switching to use Hex instead of Github works for allowing the override to work. Change: {:soap, git: "https://github.com/potok-digital/soap", tag: "master"} to: {:soap, "~> 1.1.0"}

eckmanca-caremore avatar May 06 '22 20:05 eckmanca-caremore

This shouldn't be an issue due to #97

cgarvis avatar Jun 26 '23 20:06 cgarvis