Henry Kuijpers created SLING-10284:
--------------------------------------
Summary: Dependency check fails on CVE-2015-2944 for Sling
Resource Merger 1.4.0
Key: SLING-10284
URL: https://issues.apache.org/jira/browse/SLING-10284
Project: Sling
Issue Type: Bug
Components: ResourceResolver
Affects Versions: Resource Merger 1.4.0
Reporter: Henry Kuijpers
Failed to execute goal org.owasp:dependency-check-maven:5.3.0:check
(check-dependencies-for-vulnerabilities) on project dependencies:
One or more dependencies were identified with vulnerabilities:
org.apache.sling.resourcemerger-1.4.0.jar: CVE-2015-2944
See the dependency-check report for more details.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)