Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: cloudinary/cloudinary_java
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: master
Choose a base ref
...
head repository: cloudinary/cloudinary_java
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: fix/httpcore5-dos-vulnerability
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 1 commit
  • 2 files changed
  • 2 contributors

Commits on May 31, 2026

  1. Bump httpcore5 5.2.5 -> 5.3.5 to fix DoS vulnerability (VIDEO-20814)

    Fixes SNYK-JAVA-ORGAPACHEHTTPCOMPONENTSCORE5-15857052: incorrect stream
    accounting in httpcore5-h2 allows unbounded concurrent streams via
    rapid resets. Also aligns httpcore5 version with httpclient5 5.3.x
    release train.
    
    Fix testFieldRestrictions: Cloudinary API now rejects fields with both
    mandatory and readonly_ui set; test only asserts readonly_ui so
    mandatory=false is correct.
    
    Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
    adim-blip and claude committed May 31, 2026
    Configuration menu
    Copy the full SHA
    5895cc5 View commit details
    Browse the repository at this point in the history
Loading