sling-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Julian Reschke (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (SLING-7506) org.apache.sling.scripting.jsp.taglib: update esapi dependency
Date Mon, 19 Feb 2018 16:15:00 GMT

     [ https://issues.apache.org/jira/browse/SLING-7506?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Julian Reschke updated SLING-7506:
----------------------------------
    Description: 
To 

  https://mvnrepository.com/artifact/org.owasp.esapi/esapi/2.1.0.1

due to the current transitive dep on

  https://mvnrepository.com/artifact/org.owasp.antisamy/antisamy/1.4.3

which has several CVEs reported against..



> org.apache.sling.scripting.jsp.taglib: update esapi dependency
> --------------------------------------------------------------
>
>                 Key: SLING-7506
>                 URL: https://issues.apache.org/jira/browse/SLING-7506
>             Project: Sling
>          Issue Type: Task
>          Components: Scripting
>            Reporter: Julian Reschke
>            Priority: Major
>
> To 
>   https://mvnrepository.com/artifact/org.owasp.esapi/esapi/2.1.0.1
> due to the current transitive dep on
>   https://mvnrepository.com/artifact/org.owasp.antisamy/antisamy/1.4.3
> which has several CVEs reported against..



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message