Vulnerabilities in dependency com.overzealous:remark:1.1.0

[midmarch]

Dependency com.overzealous:remark:1.1.0, declared here:

markdown-gradle-plugin/build.gradle

Line 74 in 5087eec

api('com.overzealous:remark:1.1.0') { transitive = false }

contains multiple vulnerabilities:

1. CVE-2022-36033
2. CVE-2021-37714
3. CVE-2021-29425
4. CVE-2020-15250

Ref: https://mvnrepository.com/artifact/com.overzealous/remark/1.1.0

[aalmiray]

The CVES come from jsoup. Latest jsoup (1.15.3) fixes these errors but in a binary incompatible way. Remark (com.kotcrab.remark:remark:1.2.0) has not been updated.

[siboxd]

The mentioned dependency is no more present on maven, and any build using your library fails because of it.

Can it be replaced, and a new library version published?