You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@camel.apache.org by "Claus Ibsen (Jira)" <ji...@apache.org> on 2025/10/22 08:20:00 UTC

[jira] [Commented] (CAMEL-22583) [camel-jbang] Replace org.fusesource.jansi dependency

    [ https://issues.apache.org/jira/browse/CAMEL-22583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18031991#comment-18031991 ] 

Claus Ibsen commented on CAMEL-22583:
-------------------------------------

[~gnodet] do you have any feedback on this. The color is super important to have a good CLI and UX so we should keep this feature but do we really use any native part of jansi for just doing colour text outputs

> [camel-jbang] Replace org.fusesource.jansi dependency
> -----------------------------------------------------
>
>                 Key: CAMEL-22583
>                 URL: https://issues.apache.org/jira/browse/CAMEL-22583
>             Project: Camel
>          Issue Type: Task
>    Affects Versions: 4.15.0
>            Reporter: Pasquale Congiusti
>            Priority: Minor
>
> This one is reported as a warning starting from JDK 24 and possibly will be removed in the future for security reasons. The problem with Jansi dependency is that it loads native operating system libraries, enabling potential vulnerabilities. As we are only using this feature in the CLI (camel-jbang modules), the impact is not wide, however I suggest we have an action plan to replace the coloring with some non-native dependency and avoid any future disruption.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)