michael-o commented on PR #170: URL: https://github.com/apache/maven-javadoc-plugin/pull/170#issuecomment-1326405758
> > I fully agree with @olamy, we are not affected here. The CVE does not apply: [..] > > @michael-o and as a conclusion the plugin won't be upgraded? No, I did not say that. I approve the PR because I don't see a reason not to merge it, but the abstract provided by the PR does not apply here. So any other committer is free to merge. Those who absolutely need this to happen also this is a non-issue are free to get in touch privately with a committer to sponsor a release. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
