Vulnerability in ini4j dependency

[zcronix]

The ini4j dependency of proxy-vole has an open vulnerability, CVE-2022-41404. The ini4j project appears to be abandoned; the issue to resolve the CVE has received no response from the maintainer in over four months.

(Despite the CVE stating versions up to 0.5.4, it's been noted on the issue tracker that the vulnerability is still present in version 0.5.4. The CPE matches all versions of ini4j, which appears to be correct.)

Please consider an alternate library for INI parsing, or perhaps switch to a fork of ini4j which addresses the vulnerability. https:/SuperMap/ini4j is one such possibility.

[gokceryapar]

Is it possible to close this issue? You can check https://mvnrepository.com/artifact/org.ini4j/ini4j for 0.5.4 there is no found vulnerabilities.