Skip to content

Commit 7e5e610

Browse files
Update labkeyVersion to 25.11.4
2 parents aec039f + cbb0dfc commit 7e5e610

2 files changed

Lines changed: 13 additions & 1 deletion

File tree

dependencyCheckSuppression.xml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -182,4 +182,16 @@
182182
<packageUrl regex="true">^pkg:maven/org\.itadaki/bzip2@.*$</packageUrl>
183183
<cpe>cpe:/a:bzip2_project:bzip2</cpe>
184184
</suppress>
185+
186+
<!--
187+
Rhino 1.7R3 is getting flagged with a potential DoS issue when toFixed() is called on very small floating point numbers.
188+
Upgrading to a fixed version is not trivial. See https://github.com/LabKey/internal-issues/issues/724 for details.
189+
-->
190+
<suppress>
191+
<notes><![CDATA[
192+
file name: rhino-1.7R3.jar
193+
]]></notes>
194+
<packageUrl regex="true">^pkg:maven/org\.mozilla/rhino@.*$</packageUrl>
195+
<vulnerabilityName>CVE-2025-66453</vulnerabilityName>
196+
</suppress>
185197
</suppressions>

gradle.properties

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ buildFromSource=true
4444

4545
# The default version for LabKey artifacts that are built or that we depend on.
4646
# override in an individual module's gradle.properties file as necessary
47-
labkeyVersion=25.11.3
47+
labkeyVersion=25.11.4
4848
labkeyClientApiVersion=7.0.0
4949

5050
# Version numbers for the various binary artifacts that are included when

0 commit comments

Comments
 (0)