2 vulnerabilities found in dependency.

[warm-tune]

My IDE says that deepl dependency have transitive dependencies with known vulnerabilities.

 <dependency>
            <groupId>com.deepl.api</groupId>
            <artifactId>deepl-java</artifactId>
            <version>1.10.2</version>
        </dependency>

2 vulnerabilities found in dependency:
WS-2017-3734 5.3 Transitive Files or Directories Accessible to External Parties
CVE-2020-13956 5.3 Transitive Cross-Site Scripting (XSS)

Dependency maven:org.apache.httpcomponents:httpclient:4.5.2 is vulnerable.
Released Feb 21, 2016. Latest version is 4.5.14 has no known vulnerabilities.

Dependency maven:org.apache.commons:commons-lang3:3.16.0 is vulnerable.
Released Aug 07, 2024. Latest version is 3.18.0 has no known vulnerabilities.

Please, fix these asap.

Thanks.

[daniel-jones-dev]

Hi @warm-tune, thanks for reporting and sorry for the delay. Looking into this now.

[daniel-jones-dev]

This dependency is updated in v1.10.3.

[warm-tune]

Cool, could you please tell when approx. it will be in maven central?

[daniel-jones-dev]

Sorry, there was an issue in our publishing pipeline, thanks for pointing this out. It should be available on maven central now.