nomemory / java-bean-validation-extension

A library that extends the Java Bean Validation with additional @Annotations.

Hi 👋

I blog on www.andreinc.net.

java-bean-validation-extension's Issues

Jakarta version

Great library. Thanks.

However we are using the Jakarta based jakarta.el (version 4.x), instead of javax.el (version 3.x), which this library isn't compatible with.

I thought about forking this repo and update it myself, but I think it might be a better idea to get the Jakarta version added to this repro directly which might benefit more people.

CVE-2019-10086. Bump commons-beanutils version to 1.9.4

Hi,

First of all thank you for all the work and effort put on this project, much appreciated.

The package commons-beanutils version 1.9.2 has been tagged with CVE-2019-10086.
I leave you some references:
https://nvd.nist.gov/vuln/detail/CVE-2019-10086
https://snyk.io/vuln/SNYK-JAVA-COMMONSBEANUTILS-460111

This is a transitive dependency from commons-validator, and there is no date for fix release from the Apache team.

Could you consider setting the commons-beanutils version to 1.9.4 as this version fixes the vulnerability?

Thanks in advance,
Regards.

Maven Central

Thank you so much. This is a great library! As a feature request, could you please add it to Maven Central and include the coordinate instructions in the readme?

JSAssert annotation

I am happy to find this project, I really appreciate the effort you put in it. I would like to propose to detach the JSAssert validation functionality to a separate module because bring the heavy graalvm JS engine which is itself 15M+
I think would be a great idea to separate that functionality to separated jar