Is jira-rest-java-client-core going to be updated?

[Petula Lau]

Hi there - I am using jira-rest-java-client-core version 5.2.0 to get a list of jira issues and display in my java web application

However this library hasn't been updated since 2020 - is this library still maintained? I ran an analysis on it and it contains a vulnerability :

com.sun.jersey:jersey-json@1.19 › org.codehaus.jackson:jackson-mapper-asl@1.9.2 

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10172

Thanks

[Jakub Sławiński]

A short answer is that jira-rest-java-client-core is not maintained.

Why do you need to fix that vulnerability? It doesn't look to severe and I can hardly imagine the case you would really need to fix it.

[Petula Lau]

It is still listed as a high vulnerability when I run https://snyk.io/

If jira-rest-java-client-core is not maintained anymore, is there another java library I can use to search JIRA (server) with JQL and get a list of Issues back?

Thank you

[Jakub Sławiński]

I do not know other dedicated library in Java. However, it is just an API, so you should be able to handle it as any other API in Java.