[SOLR-16402] Update GSON dependency for CVE 2022-24657

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 9.1, main (10.0)
• Assignee: Kevin Risden
• Reporter: Cassandra Targett
• Created: 06/Sep/22 15:44
• Updated: 25/Jan/23 16:15
• Resolved: 07/Sep/22 22:14

Description

There is a CVE against GSON 2.8.9: https://nvd.nist.gov/vuln/detail/CVE-2022-25647

It may or may not impact Solr, but if we can update to 2.9.0 or higher, then it might be worth it to do so.

Issue Links

• links to: GitHub Pull Request #998