[jira] [Created] (AMQ-9196) ActiveMQ jar bundled with Xsteam library is vulnerable which should upgrade to Xstream 1.4.20 (CVE-2022-41966)

[Kishore KN (Jira)]

Kishore KN created AMQ-9196:
-------------------------------

             Summary: ActiveMQ jar bundled with Xsteam library is vulnerable 
which should upgrade to Xstream 1.4.20 (CVE-2022-41966)
                 Key: AMQ-9196
                 URL: https://issues.apache.org/jira/browse/AMQ-9196
             Project: ActiveMQ
          Issue Type: Bug
          Components: Broker
    Affects Versions: 5.17.3
            Reporter: Kishore KN
             Fix For: 5.18.0






--
This message was sent by Atlassian Jira
(v8.20.10#820010)