[
https://issues.apache.org/jira/browse/JCRVLT-863?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Konrad Windszus resolved JCRVLT-863.
------------------------------------
Resolution: Fixed
Fixed in
https://github.com/apache/jackrabbit-filevault/commit/803405df0b927ea547d59ab394b7a1f63602b71d.
> Bump minimum required JR2 version to 2.20.18
> --------------------------------------------
>
> Key: JCRVLT-863
> URL: https://issues.apache.org/jira/browse/JCRVLT-863
> Project: Jackrabbit FileVault
> Issue Type: Improvement
> Reporter: Konrad Windszus
> Assignee: Konrad Windszus
> Priority: Major
> Fix For: 4.3.0
>
>
> Although the minimum required JR2 version only determines the lower version
> bound in OSGi environment we should prevent false positives by scanner
> triggered by
> CVE-2026-92414(9.3), CVE-2026-92415(6.9)
> (both fixed in 2.20.18).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
