[ 
https://issues.apache.org/jira/browse/SLING-12106?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Eric Norman closed SLING-12106.
-------------------------------

> Bump dependencies to the earliest versions without known vulnerabilities
> ------------------------------------------------------------------------
>
>                 Key: SLING-12106
>                 URL: https://issues.apache.org/jira/browse/SLING-12106
>             Project: Sling
>          Issue Type: Improvement
>            Reporter: Eric Norman
>            Assignee: Eric Norman
>            Priority: Major
>             Fix For: JCR Jackrabbit User Manager 2.2.28
>
>
> Mostly to keep tooling from flagging these as "vulnerabilities from 
> dependencies"
>  # bump org.apache.sling.servlets.post to 2.3.22
>  # bump org.apache.sling.jcr.base to 3.1.12



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to