Hi there - I am using jira-rest-java-client-core version 5.2.0 to get a list of jira issues and display in my java web application
However this library hasn't been updated since 2020 - is this library still maintained? I ran an analysis on it and it contains a vulnerability :
com.sun.jersey:jersey-json@1.19 › org.codehaus.jackson:jackson-mapper-asl@1.9.2
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10172
Thanks
A short answer is that jira-rest-java-client-core is not maintained.
Why do you need to fix that vulnerability? It doesn't look to severe and I can hardly imagine the case you would really need to fix it.
It is still listed as a high vulnerability when I run https://snyk.io/
If jira-rest-java-client-core is not maintained anymore, is there another java library I can use to search JIRA (server) with JQL and get a list of Issues back?
Thank you
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
I do not know other dedicated library in Java. However, it is just an API, so you should be able to handle it as any other API in Java.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.