security alert digest issue

[novica]

The line where it is referenced:
https://github.com/NorwegianVeterinaryInstitute/irida-plugin-nvi-IRMA/blob/ce5d68dc90e4e81ab17f7862d5abdbc827de1817/pom.xml#L25C1-L25C37

The current version is 3.13.0 released on Nov 29, 2024. (https://github.com/pf4j/pf4j).

So probably update that to 3.13.0 unless it breaks other things?

[karinlag]

@ajkarloss I need to know the severity of this. Not just how it will be resolved, but the level of badness.

[novica]

Are you guys not fixing this? I keep getting this alert.

[novica]

We have investigated this and documented it here: pf4j_vulnerability

GitHub will continue to send Dependabot alerts, but there is nothing we can do about it until IRIDA is upgraded, as noted in the above md.