[
https://issues.apache.org/jira/browse/SLING-7506?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16461645#comment-16461645
]
Dan Klco commented on SLING-7506:
---------------------------------
Fixed in
https://github.com/apache/sling-org-apache-sling-scripting-jsp-taglib/commit/5a268075a0196312bfe4656c238786f995cb99c7
> org.apache.sling.scripting.jsp.taglib: update esapi dependency
> --------------------------------------------------------------
>
> Key: SLING-7506
> URL: https://issues.apache.org/jira/browse/SLING-7506
> Project: Sling
> Issue Type: Task
> Components: Scripting
> Reporter: Julian Reschke
> Assignee: Dan Klco
> Priority: Major
>
> To
> https://mvnrepository.com/artifact/org.owasp.esapi/esapi/2.1.0.1
> due to the current transitive dep on
> https://mvnrepository.com/artifact/org.owasp.antisamy/antisamy/1.4.3
> which has several CVEs reported against..
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
