logback-awslogs-appender icon indicating copy to clipboard operation
logback-awslogs-appender copied to clipboard

Published 20 hours ago • verified publisher icon pierredavidbelanger

Potential to update AWS SDK version

Open bakelew opened this issue 1 year ago • 0 comments

Hi there, just wanted to bring an issue to attention of the developers around this dependency https://github.com/pierredavidbelanger/logback-awslogs-appender/blob/1cda000fb70d83a51030929f46bbe885364b9659/pom.xml#L63

The AWS SDK package used is fairly old (2.16.65 / May 18, 2021)

The older versions have some vulnerabilities that are already fixed by AWS such as:

  • https://github.com/aws/aws-sdk-java-v2/pull/4575

Would it be possible to update this dependency?

Thank you very much!

bakelew avatar Dec 06 '23 01:12 bakelew