[
https://issues.apache.org/jira/browse/SLING-7506?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Julian Reschke updated SLING-7506:
----------------------------------
Description:
To
https://mvnrepository.com/artifact/org.owasp.esapi/esapi/2.1.0.1
due to the current transitive dep on
https://mvnrepository.com/artifact/org.owasp.antisamy/antisamy/1.4.3
which has several CVEs reported against..
> org.apache.sling.scripting.jsp.taglib: update esapi dependency
> --------------------------------------------------------------
>
> Key: SLING-7506
> URL: https://issues.apache.org/jira/browse/SLING-7506
> Project: Sling
> Issue Type: Task
> Components: Scripting
> Reporter: Julian Reschke
> Priority: Major
>
> To
> https://mvnrepository.com/artifact/org.owasp.esapi/esapi/2.1.0.1
> due to the current transitive dep on
> https://mvnrepository.com/artifact/org.owasp.antisamy/antisamy/1.4.3
> which has several CVEs reported against..
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
