Slavik created CURATOR-684: ------------------------------ Summary: Update dependencies: org.jboss.resteasy Key: CURATOR-684 URL: https://issues.apache.org/jira/browse/CURATOR-684 Project: Apache Curator Issue Type: Task Affects Versions: 5.5.0 Reporter: Slavik Assignee: Enrico Olivelli
Curator has this dependency: <groupId>org.jboss.resteasy</groupId> <artifactId>resteasy-jaxrs</artifactId> 2.3.5.Final That dependency bring CVEs: * [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6346] (denial of service) * [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7839] (XML external entity (XXE) attacks) -- This message was sent by Atlassian Jira (v8.20.10#820010)