[
https://issues.apache.org/jira/browse/JCRVLT-863?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18132383#comment-18132383
]
Rishabh Daim commented on JCRVLT-863:
-------------------------------------
Fixed in 3.2.10 in
https://github.com/apache/jackrabbit-filevault/commit/3a9bb1b55debee3b2911ada6fb5847af81477b60
> Bump minimum required JR2 version to 2.20.18
> --------------------------------------------
>
> Key: JCRVLT-863
> URL: https://issues.apache.org/jira/browse/JCRVLT-863
> Project: Jackrabbit FileVault
> Issue Type: Improvement
> Reporter: Konrad Windszus
> Assignee: Konrad Windszus
> Priority: Major
> Fix For: 3.2.10, 4.3.0
>
>
> Although the minimum required JR2 version only determines the lower version
> bound in OSGi environment we should prevent false positives by scanner
> triggered by
> CVE-2026-92414(9.3), CVE-2026-92415(6.9)
> (both fixed in 2.20.18).
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
