https://bz.apache.org/bugzilla/show_bug.cgi?id=65166
Bug ID: 65166
Summary: Apache Batik 1.13 vulnerabilities (CVE-2020-11987,
CVE-2020-11988)
Product: POI
Version: 5.0.0-FINAL
Hardware: All
OS: All
Status: NEW
Severity: major
Priority: P2
Component: POI Overall
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
Apache Batik 1.13 vulnerabilities:
- CVE-2020-11987 (Apache Batik 1.13)
- CVE-2020-11988 (Apache XmlGraphics Commons 2.4)
Reviewing the repository I found that you already bump Batik from 1.13 to 1.14.
Given this reported vulnerabilities, could you make a new release with the
updated dependencies?
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
