[
https://issues.apache.org/jira/browse/KARAF-7885?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17901961#comment-17901961
]
Martin Lichtin commented on KARAF-7885:
---------------------------------------
pax-url-aether is also affected by the commons-io vulnerabilities, as it
contains an embedded old version of commons-io.
> Upgrade to Common-IO 2.18.0
> ---------------------------
>
> Key: KARAF-7885
> URL: https://issues.apache.org/jira/browse/KARAF-7885
> Project: Karaf
> Issue Type: Improvement
> Components: decanter
> Reporter: Francois Papon
> Assignee: Francois Papon
> Priority: Major
> Fix For: decanter-2.11.0
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
