Skip to content

Commit 38fc5f3

Browse files
authored
CVE-2025-66453 Rhino has high CPU usage and potential DoS (#158)
1 parent 243e3ee commit 38fc5f3

File tree

2 files changed

+3
-2
lines changed

2 files changed

+3
-2
lines changed

pom.xml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -205,7 +205,8 @@
205205
<jackson.version>2.15.4</jackson.version>
206206
<slf4j.version>2.0.17</slf4j.version>
207207
<swagger.version>1.6.11</swagger.version>
208-
<rhino.version>1.7.14</rhino.version>
208+
<rhino.version>1.7.15.1</rhino.version>
209+
<rhino.servicemix.version>1.7.15_1</rhino.servicemix.version>
209210
<jetty.version>11.0.25</jetty.version>
210211
<grizzly-framework.version>3.0.1</grizzly-framework.version>
211212
<servlet-api.version>5.0.0</servlet-api.version>

script/javascript/pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@
6767
<dependency>
6868
<groupId>org.apache.servicemix.bundles</groupId>
6969
<artifactId>org.apache.servicemix.bundles.rhino</artifactId>
70-
<version>${rhino.version}_2</version>
70+
<version>${rhino.servicemix.version}</version>
7171
</dependency>
7272
<!--
7373
<dependency>

0 commit comments

Comments
 (0)