Clebert Suconic created ARTEMIS-5984:
----------------------------------------

             Summary: Remove plexus-utils from the depency list on 
artemis-maven-plugin
                 Key: ARTEMIS-5984
                 URL: https://issues.apache.org/jira/browse/ARTEMIS-5984
             Project: Artemis
          Issue Type: Improvement
            Reporter: Clebert Suconic


plexus-utils is the subject of a CVE: CVE-2025-67030


And this makes artemis-maven-plugin to showup on security scanners even though 
the library is not used at any point.


To settle things and not need any further discussion, I'm simply removing the 
dependency with an exclude



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to