Nok Arrenu created SLING-11988:
----------------------------------
Summary: Apache Sling Testing Sling Mock Core Vulnerabilities
Key: SLING-11988
URL: https://issues.apache.org/jira/browse/SLING-11988
Project: Sling
Issue Type: Bug
Reporter: Nok Arrenu
Hello Apache Sling team,
The latest [Apache Sling Testing Sling Mock
Core|https://mvnrepository.com/artifact/org.apache.sling/org.apache.sling.testing.sling-mock.core]
version 3.4.10
([https://mvnrepository.com/artifact/org.apache.sling/org.apache.sling.testing.sling-mock.core/3.4.10])
that was released in May 2023 currently has these 3 vulnerabilities:
[CVE-2023-25621|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25621]
[CVE-2022-32549|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32549]
[CVE-2021-29425|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29425]
Can you please share your timeline on when the above vulnerabilities will be
fixed?
Thanks!
--
This message was sent by Atlassian Jira
(v8.20.10#820010)