fix: update logback version to fix vulnerability (#158)

IBM · Dec 1, 2021 · b9f3cb3 · b9f3cb3
1 parent 1bfa41c
commit b9f3cb3
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 5 deletions.
diff --git a/.cra/.cveignore b/.cra/.cveignore
@@ -1,6 +1,2 @@
 [
-  {
-    "cve": "SNYK-JAVA-CHQOSLOGBACK-1726923",
-    "untilRemediationAvailable": true
-  }
 ]
diff --git a/pom.xml b/pom.xml
@@ -18,7 +18,7 @@
         <jacoco-plugin-version>0.8.3</jacoco-plugin-version>
         <compiler-plugin-version>3.8.0</compiler-plugin-version>
         <okhttp3-version>4.9.1</okhttp3-version>
-        <logback-version>1.2.6</logback-version>
+        <logback-version>1.2.7</logback-version>
         <guava-version>30.1.1-jre</guava-version>
         <gson-version>2.8.9</gson-version>
         <commons-codec-version>1.15</commons-codec-version>