PJ Fanning created UNOMI-821:
--------------------------------

             Summary: Unomi uses a non OSS version of org.json:json jar
                 Key: UNOMI-821
                 URL: https://issues.apache.org/jira/browse/UNOMI-821
             Project: Apache Unomi
          Issue Type: Bug
            Reporter: PJ Fanning


See 
https://github.com/apache/unomi/blob/110286ad74ecaec927f3b61c54140d852dfbd4fe/extensions/unomi-mailchimp/services/pom.xml#L60

Please read https://www.apache.org/legal/resolved.html (JSON license section).

Newer version of this jar (2023/2024) have a Public Domain license so are ok. 
These releases have CVE fixes too.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to