Builds fail because of a security issue in Apache Uima 3.4.1 (CVE-2023-39913). This is fixed in 3.5.0 but that one requires jdk17 :-(

Uima is used because ctakes is used in the Apache Tika natural language process module. I don't know if CVE-2023-39913 applies to us at all or if we can mitigate it as described.

https://ossindex.sonatype.org/vulnerability/CVE-2023-39913

Tilman

Reply via email to