HIGH vulnerabilities

[ClemRz]

Hi,

It seems that nvd-clojure detects quite a few HIGH vulnerabilities due to the Batik dependencies version used in on-time:

• batik-css-1.15.jar: CVE-2022-44729, CVE-2022-42890, CVE-2022-41704, CVE-2022-44730
• batik-i18n-1.15.jar: CVE-2022-44729, CVE-2022-44730

~It seems that this is for front-end purposes. Why are they actually needed?~ <- probably for QR rendering.

Is there any plan to upgrade these dependencies please?

[ClemRz]

Actually, PR #24 from @daviddurand should solve these vulnerabilities.

[suvash]

@ClemRz Thanks for opening the issue. Since the PR is now merged, I'll also close this one. Please feel free to open a new one if needed.

I'd also appreciate if you'd like to submit a PR for automated tests/reports using nvd-clojure.

Thanks again!