[
https://issues.apache.org/jira/browse/KARAF-7947?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18010251#comment-18010251
]
ASF GitHub Bot commented on KARAF-7947:
---------------------------------------
jbonofre merged PR #1975:
URL: https://github.com/apache/karaf/pull/1975
> Karaf: Upgrade org.apache.felix.cm.json due to vulnerability
> ------------------------------------------------------------
>
> Key: KARAF-7947
> URL: https://issues.apache.org/jira/browse/KARAF-7947
> Project: Karaf
> Issue Type: Dependency upgrade
> Components: karaf
> Reporter: Martin Lichtin
> Assignee: Jean-Baptiste Onofré
> Priority: Major
>
> Karaf: Upgrade org.apache.felix.cm.json due to vulnerability
> Version org.apache.felix.cm.json-1.0.6.jar is marked with a vulnerability
> The vulnerability looks like a red-herring, but still users complain, and it
> will be easier if we could use a slightly newer version.
> [Maven Repository: org.apache.felix »
> org.apache.felix.cm.json|https://mvnrepository.com/artifact/org.apache.felix/org.apache.felix.cm.json]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
