tabula-java
tabula-java copied to clipboard
Gson vulnerability in tabula-1.0.5 release
While gson version was updated to 2.0.9 to fix the following issue: https://github.com/advisories/GHSA-4jrv-ppp4-jm57 through https://github.com/tabulapdf/tabula-java/commit/ab93da966b42b3384ba69556b491e82a0580bcda the latest release https://github.com/tabulapdf/tabula-java/releases/tag/v1.0.5 still has the vulnerable version.
Would it be ok asking for a new release of tabula-java?
Any update on this?
+1, this is affecting me too
This is affecting me due to tabula-py having tabula-java v1.0.5 within it
Please make a new release so they can update the wrapper afterwards