On Thu, Dec 23, 2021 at 11:05 AM Vladimir Sitnikov < [email protected]> wrote: > > >Where is this CVE tonnage? > > JMSAppender > JMSSink > chainsaw > SocketServer > infinite recursion (1.x does have some recursive code trying to replace > variables) > .... > > I do not know CVE numbers, yet I just see the bugs are there.
Ahhhh, so in fact "1.x has LOTs of known CVEs." translate to one CVE. Thanks for the FUD. G > > > Vladimir
